{ "CVE_data_type" : "CVE", "CVE_data_format" : "MITRE", "CVE_data_version" : "4.0", "CVE_data_numberOfCVEs" : "4758", "CVE_data_timestamp" : "2020-08-19T08:57Z", "CVE_Items" : [ { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0001", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "trustix", "product" : { "product_data" : [ { "product_name" : "secure_linux", "version" : { "version_data" : [ { "version_value" : "2", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://isec.pl/vulnerabilities/isec-0022-pagefault.txt", "name" : "http://isec.pl/vulnerabilities/isec-0022-pagefault.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html", "name" : "20050112 Linux kernel i386 SMP page fault handler privilege escalation", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110554694522719&w=2", "name" : "20050112 Linux kernel i386 SMP page fault handler privilege escalation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110581146702951&w=2", "name" : "20050114 [USN-60-0] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13822", "name" : "13822", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012862", "name" : "1012862", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022", "name" : "MDKSA-2005:022", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-016.html", "name" : "RHSA-2005:016", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html", "name" : "RHSA-2005:017", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html", "name" : "RHSA-2005:043", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12244", "name" : "12244", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0001/", "name" : "2005-0001", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2336", "name" : "FLSA:2336", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18849", "name" : "linux-fault-handler-gain-privileges(18849)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322", "name" : "oval:org.mitre.oval:def:10322", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0002", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "poppassd_pam", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13865", "name" : "13865", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-22.xml", "name" : "GLSA-200501-22", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012840", "name" : "1012840", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:poppassd_pam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0003", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "avaya", "product" : { "product_data" : [ { "product_name" : "intuity_audix", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "mn100", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "network_routing", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "converged_communications_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "s8300", "version" : { "version_data" : [ { "version_value" : "r2.0.0", "version_affected" : "=" }, { "version_value" : "r2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "s8500", "version" : { "version_data" : [ { "version_value" : "r2.0.0", "version_affected" : "=" }, { "version_value" : "r2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "s8700", "version" : { "version_data" : [ { "version_value" : "r2.0.0", "version_affected" : "=" }, { "version_value" : "r2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "s8710", "version" : { "version_data" : [ { "version_value" : "r2.0.0", "version_affected" : "=" }, { "version_value" : "r2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "modular_messaging_message_storage_server", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_multi_network_firewall", "version" : { "version_data" : [ { "version_value" : "8.2", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.4/cset@41c36fb6q1Z68WUzKQFjJR-40Ev3tw", "name" : "http://linux.bkbits.net:8080/linux-2.4/cset@41c36fb6q1Z68WUzKQFjJR-40Ev3tw", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012885", "name" : "1012885", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022", "name" : "MDKSA-2005:022", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-017.html", "name" : "RHSA-2005:017", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-043.html", "name" : "RHSA-2005:043", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12261", "name" : "12261", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0001/", "name" : "2005-0001", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18886", "name" : "linux-vma-gain-privileges(18886)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512", "name" : "oval:org.mitre.oval:def:9512", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:mn100:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:network_routing:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8710:r2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8710:r2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0004", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.5a", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_1.0", "version_affected" : "=" } ] } }, { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947", "name" : "CLA-2005:947", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://lists.mysql.com/internals/20600", "name" : "http://lists.mysql.com/internals/20600", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110608297217224&w=2", "name" : "20050118 [USN-63-1] MySQL client vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html", "name" : "http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13867", "name" : "13867", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1", "name" : "101864", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-647", "name" : "DSA-647", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:036", "name" : "MDKSA-2005:036", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12277", "name" : "12277", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18922", "name" : "mysql-mysqlaccess-symlink(18922)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2019-12-17T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0005", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "graphicsmagick", "product" : { "product_data" : [ { "product_name" : "graphicsmagick", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.2.5", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.0.7", "version_affected" : "=" }, { "version_value" : "6.0.8", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1.1.6", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.1.4", "version_affected" : "=" }, { "version_value" : "6.1.5", "version_affected" : "=" }, { "version_value" : "6.1.6", "version_affected" : "=" }, { "version_value" : "6.1.7", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.2.0.4", "version_affected" : "=" }, { "version_value" : "6.2.0.7", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "1.1a", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110608222117215&w=2", "name" : "20050118 [USN-62-1] imagemagick vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-646", "name" : "DSA-646", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml", "name" : "GLSA-200501-37", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities", "name" : "20050117 Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-071.html", "name" : "RHSA-2005:071", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925", "name" : "oval:org.mitre.oval:def:9925", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0006", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html", "name" : "RHSA-2005:011", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18999", "name" : "ethereal-cops-dos(18999)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801", "name" : "oval:org.mitre.oval:def:10801", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0007", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html", "name" : "RHSA-2005:011", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19000", "name" : "ethereal-dlsw-dos(19000)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11381", "name" : "oval:org.mitre.oval:def:11381", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0008", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.5", "version_affected" : "=" }, { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html", "name" : "RHSA-2005:011", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19001", "name" : "ethereal-dnp-memory-corruption(19001)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10689", "name" : "oval:org.mitre.oval:def:10689", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause \"memory corruption.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0009", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html", "name" : "RHSA-2005:011", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19002", "name" : "ethereal-gnutella-dos(19002)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10623", "name" : "oval:org.mitre.oval:def:10623", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0010", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.10.5", "version_affected" : "=" }, { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-011.html", "name" : "RHSA-2005:011", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19003", "name" : "ethereal-mmse-free-memory(19003)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9521", "name" : "oval:org.mitre.oval:def:9521", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0011", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14306", "name" : "14306", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml", "name" : "GLSA-200502-23", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kde.org/info/security/advisory-20050215-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050215-1.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html", "name" : "FEDORA-2005-148", "refsource" : "FEDORA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0012", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dillo", "product" : { "product_data" : [ { "product_name" : "dillo_web_browser", "version" : { "version_data" : [ { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.1.2", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13760/", "name" : "13760", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/13764", "name" : "13764", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml", "name" : "GLSA-200501-11", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12203", "name" : "12203", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18807", "name" : "dillo-capi-format-string(18807)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dillo:dillo_web_browser:0.8.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0013", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ncpfs", "product" : { "product_data" : [ { "product_name" : "ncpfs", "version" : { "version_data" : [ { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6", "name" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013019", "name" : "1013019", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-665", "name" : "DSA-665", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml", "name" : "GLSA-200501-44", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028", "name" : "MDKSA-2005:028", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13297", "name" : "13297", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-371.html", "name" : "RHSA-2005:371", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded", "name" : "FLSA:152904", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12400", "name" : "12400", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0014", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ncpfs", "product" : { "product_data" : [ { "product_name" : "ncpfs", "version" : { "version_data" : [ { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6", "name" : "ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013019", "name" : "1013019", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml", "name" : "GLSA-200501-44", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:028", "name" : "MDKSA-2005:028", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13298", "name" : "13298", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/433927/100/0/threaded", "name" : "FLSA:152904", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12400", "name" : "12400", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncpfs:ncpfs:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0015", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "crosswire_bible_society", "product" : { "product_data" : [ { "product_name" : "sword", "version" : { "version_data" : [ { "version_value" : "1.5.7a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13897", "name" : "13897", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13941", "name" : "13941", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012955", "name" : "1012955", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-650", "name" : "DSA-650", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12320", "name" : "12320", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18997", "name" : "sword-diatheke-command-execution(18997)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:crosswire_bible_society:sword:1.5.7a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0016", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gatos", "product" : { "product_data" : [ { "product_name" : "gatos", "version" : { "version_data" : [ { "version_value" : "0.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13884/", "name" : "13884", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-640", "name" : "DSA-640", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18930", "name" : "gatos-xatitv-bo(18930)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gatos:gatos:0.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0017", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14041", "name" : "14041", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14052", "name" : "14052", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14067", "name" : "14067", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013028", "name" : "1013028", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-661", "name" : "DSA-661", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-43.xml", "name" : "GLSA-200501-43", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12380", "name" : "12380", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:f2c_open_source_project:f2c_translator:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0018", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f2c_open_source_project", "product" : { "product_data" : [ { "product_name" : "f2c_translator", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14041", "name" : "14041", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14052", "name" : "14052", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013028", "name" : "1013028", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-661", "name" : "DSA-661", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12380", "name" : "12380", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f2c_open_source_project:f2c_translator:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0019", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yongguang_zhang", "product" : { "product_data" : [ { "product_name" : "hztty", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14236", "name" : "14236", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013154", "name" : "1013154", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-675", "name" : "DSA-675", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12518", "name" : "12518", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19297", "name" : "hztty-command-execution(19297)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yongguang_zhang:hztty:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0020", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "playmidi", "product" : { "product_data" : [ { "product_name" : "playmidi", "version" : { "version_data" : [ { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.25.1", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13828", "name" : "13828", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13890", "name" : "13890", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13898", "name" : "13898", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012957", "name" : "1012957", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-641", "name" : "DSA-641", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:010", "name" : "MDKSA-2005:010", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13049", "name" : "13049", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12274", "name" : "12274", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18933", "name" : "playmidi-bo(18933)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.25.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:playmidi:playmidi:2.3.26:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0021", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "university_of_cambridge", "product" : { "product_data" : [ { "product_name" : "exim", "version" : { "version_data" : [ { "version_value" : "4.40", "version_affected" : "<=" }, { "version_value" : "4.41", "version_affected" : "=" }, { "version_value" : "4.42", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44", "name" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml", "name" : "GLSA-200501-23", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-635", "name" : "DSA-635", "refsource" : "DEBIAN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-637", "name" : "DSA-637", "refsource" : "DEBIAN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html", "name" : "[exim] 20050104 2 smallish security issues", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities", "name" : "20050107 Exim host_aton() Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities", "name" : "20050114 Exim dns_buld_reverse() Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/132992", "name" : "VU#132992", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html", "name" : "RHSA-2005:025", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347", "name" : "oval:org.mitre.oval:def:10347", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:4.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:4.42:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0022", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "university_of_cambridge", "product" : { "product_data" : [ { "product_name" : "exim", "version" : { "version_data" : [ { "version_value" : "4.40", "version_affected" : "<=" }, { "version_value" : "4.41", "version_affected" : "=" }, { "version_value" : "4.42", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44", "name" : "http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110824870908614&w=2", "name" : "20050212 exim auth_spa_server() PoC exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-23.xml", "name" : "GLSA-200501-23", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html", "name" : "[exim] 20050104 2 smallish security issues", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities", "name" : "20050107 Exim auth_spa_server() Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-025.html", "name" : "RHSA-2005:025", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12188", "name" : "12188", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293", "name" : "oval:org.mitre.oval:def:11293", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:4.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_cambridge:exim:4.42:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0023", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "libvte4", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "libzvt2", "version" : { "version_data" : [ { "version_value" : "1.4.2.19", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=317312", "name" : "http://bugzilla.gnome.org/show_bug.cgi?id=317312", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=112879572407250&w=2", "name" : "20051007 gnome-pty-helper writes arbitrary utmp records", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17023", "name" : "17023", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/15004", "name" : "15004", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1931", "name" : "ADV-2005-1931", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22496", "name" : "libzvt-gnomeptyhelper-spoof(22496)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:libvte4:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:libzvt2:1.4.2.19:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-10-05T21:02Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0033", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt", "name" : "SCOSA-2006.1", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14009", "name" : "14009", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18291", "name" : "18291", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012996", "name" : "1012996", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.isc.org/index.pl?/sw/bind/bind8.php", "name" : "http://www.isc.org/index.pl?/sw/bind/bind8.php", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php", "name" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/327633", "name" : "VU#327633", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12364", "name" : "12364", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html", "name" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19063", "name" : "bind-qusedns-bo(19063)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:8.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:8.4.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0034", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14008", "name" : "14008", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012995", "name" : "1012995", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.isc.org/index.pl?/sw/bind/bind9.php", "name" : "http://www.isc.org/index.pl?/sw/bind/bind9.php", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php", "name" : "http://www.isc.org/index.pl?/sw/bind/bind-security.php", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/938617", "name" : "VU#938617", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12365", "name" : "12365", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html", "name" : "http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19062", "name" : "bind-named-dns-dos(19062)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An \"incorrect assumption\" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0035", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14813", "name" : "14813", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/techdocs/331465.html", "name" : "http://www.adobe.com/support/techdocs/331465.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.hyperdose.com/advisories/H2005-06.txt", "name" : "http://www.hyperdose.com/advisories/H2005-06.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf", "name" : "http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15242", "name" : "15242", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12989", "name" : "12989", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0310", "name" : "ADV-2005-0310", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0036", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "delegate", "product" : { "product_data" : [ { "product_name" : "delegate", "version" : { "version_data" : [ { "version_value" : "5.9.3", "version_affected" : "=" }, { "version_value" : "7.7.0", "version_affected" : "=" }, { "version_value" : "7.7.1", "version_affected" : "=" }, { "version_value" : "7.8.0", "version_affected" : "=" }, { "version_value" : "7.8.1", "version_affected" : "=" }, { "version_value" : "7.8.2", "version_affected" : "=" }, { "version_value" : "7.9.11", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.9", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "etl", "product" : { "product_data" : [ { "product_name" : "delegate", "version" : { "version_data" : [ { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "name" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "name" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/25291", "name" : "25291", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13729", "name" : "13729", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:5.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:7.9.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:8.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.10.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:etl:delegate:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:etl:delegate:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0037", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dnrd", "product" : { "product_data" : [ { "product_name" : "dnrd", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "name" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "name" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.osvdb.org/25291", "name" : "25291", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13729", "name" : "13729", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop." }, { "lang" : "en", "value" : "This vulnerability is addressed in the following product release:\r\ndnrd, dnrd, 2.10" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0038", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "powerdns", "product" : { "product_data" : [ { "product_name" : "powerdns", "version" : { "version_data" : [ { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "2.9.3a", "version_affected" : "=" }, { "version_value" : "2.9.4", "version_affected" : "=" }, { "version_value" : "2.9.5", "version_affected" : "=" }, { "version_value" : "2.9.6", "version_affected" : "=" }, { "version_value" : "2.9.7", "version_affected" : "=" }, { "version_value" : "2.9.8", "version_affected" : "=" }, { "version_value" : "2.9.10", "version_affected" : "=" }, { "version_value" : "2.9.11", "version_affected" : "=" }, { "version_value" : "2.9.12", "version_affected" : "=" }, { "version_value" : "2.9.13", "version_affected" : "=" }, { "version_value" : "2.9.14", "version_affected" : "=" }, { "version_value" : "2.9.15", "version_affected" : "=" }, { "version_value" : "2.9.16", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "name" : "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "name" : "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.osvdb.org/25291", "name" : "25291", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13729", "name" : "13729", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.9.16" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0039", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nissc", "product" : { "product_data" : [ { "product_name" : "ipsec", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111566201610350&w=2", "name" : "20050509 NISCC Vulnerability Advisory IPSEC - 004033", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17938", "name" : "17938", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1015320", "name" : "1015320", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/302220", "name" : "VU#302220", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en", "name" : "http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/407774", "name" : "SSRT5957", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13562", "name" : "13562", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0507", "name" : "ADV-2005-0507", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/2806", "name" : "ADV-2005-2806", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nissc:ipsec:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-10T04:00Z", "lastModifiedDate" : "2016-10-18T03:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0040", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dotnetnuke", "product" : { "product_data" : [ { "product_name" : "dotnetnuke", "version" : { "version_data" : [ { "version_value" : "3.0.11", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111627180518591&w=2", "name" : "20050516 DotNetNuke (Multiple XSS)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15397", "name" : "15397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13644", "name" : "13644", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13646", "name" : "13646", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13647", "name" : "13647", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.woany.co.uk/advisories/dotnetnukexss.txt", "name" : "http://www.woany.co.uk/advisories/dotnetnukexss.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.11" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-19T04:00Z", "lastModifiedDate" : "2016-10-18T03:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0043", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "itunes", "version" : { "version_data" : [ { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html", "name" : "APPLE-SA-2005-01-11", "refsource" : "APPLE", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/13804", "name" : "13804", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012839", "name" : "1012839", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities", "name" : "20050113 Apple iTunes Playlist Parsing Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/377368", "name" : "VU#377368", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.osvdb.org/12833", "name" : "12833", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12238", "name" : "12238", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18851", "name" : "itunes-m3u-pls-bo(18851)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0044", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/927889", "name" : "VU#927889", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012", "name" : "MS05-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19109", "name" : "win-ole-code-execution(19109)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180", "name" : "oval:org.mitre.oval:def:1180", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917", "name" : "oval:org.mitre.oval:def:2917", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568", "name" : "oval:org.mitre.oval:def:3568", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499", "name" : "oval:org.mitre.oval:def:4499", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the \"Input Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0045", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_nt", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110792638401852&w=2", "name" : "20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111040962600205&w=2", "name" : "20050309 Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=ntbugtraq&m=110795643831169&w=2", "name" : "20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability", "refsource" : "NTBUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/652537", "name" : "VU#652537", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12484", "name" : "12484", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011", "name" : "MS05-011", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19089", "name" : "win-smb-code-execution(19089)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606", "name" : "oval:org.mitre.oval:def:1606", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847", "name" : "oval:org.mitre.oval:def:1847", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889", "name" : "oval:org.mitre.oval:def:1889", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043", "name" : "oval:org.mitre.oval:def:4043", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the \"Server Message Block Vulnerability,\" and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0047", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111755870828817&w=2", "name" : "20050530 [Argeniss] MS05-012 Exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.argeniss.com/research/SSExploit.c", "name" : "http://www.argeniss.com/research/SSExploit.c", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/597889", "name" : "VU#597889", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012", "name" : "MS05-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19105", "name" : "win-com-gain-privileges(19105)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159", "name" : "oval:org.mitre.oval:def:1159", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351", "name" : "oval:org.mitre.oval:def:2351", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892", "name" : "oval:org.mitre.oval:def:2892", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901", "name" : "oval:org.mitre.oval:def:901", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Windows 2000, XP, and Server 2003 does not properly \"validate the use of memory regions\" for COM structured storage files, which allows attackers to execute arbitrary code, aka the \"COM Structured Storage Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0048", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/233754", "name" : "VU#233754", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/192", "name" : "20050412 Windows IP Options Remote Compromise", "refsource" : "ISS", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019", "name" : "MS05-019", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744", "name" : "oval:org.mitre.oval:def:1744", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3824", "name" : "oval:org.mitre.oval:def:3824", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4549", "name" : "oval:org.mitre.oval:def:4549", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the \"IP Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0049", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_portal_server", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_team_services", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/340409", "name" : "VU#340409", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006", "name" : "MS05-006", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19091", "name" : "win-sharepoint-services-xss(19091)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_portal_server:2003:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_portal_server:2003:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_team_services:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0050", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_nt", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/130433", "name" : "VU#130433", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010", "name" : "MS05-010", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19101", "name" : "win-license-code-execution(19101)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568", "name" : "oval:org.mitre.oval:def:2568", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582", "name" : "oval:org.mitre.oval:def:3582", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786", "name" : "oval:org.mitre.oval:def:4786", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644", "name" : "oval:org.mitre.oval:def:644", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an \"unchecked buffer\" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the \"License Logging Service Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:2000:*:small_business_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:2003:*:small_business_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0051", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14189", "name" : "14189", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013112", "name" : "1013112", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/939074", "name" : "VU#939074", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12486", "name" : "12486", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-007", "name" : "MS05-007", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19093", "name" : "win-named-pipe-information-disclosure(19093)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2292", "name" : "oval:org.mitre.oval:def:2292", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3055", "name" : "oval:org.mitre.oval:def:3055", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the \"Named Pipe Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0053", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/698835", "name" : "VU#698835", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/11466", "name" : "11466", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-008", "name" : "MS05-008", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014", "name" : "MS05-014", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19117", "name" : "ie-dragdrop-gain-privileges(19117)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1015", "name" : "oval:org.mitre.oval:def:1015", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1334", "name" : "oval:org.mitre.oval:def:1334", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2046", "name" : "oval:org.mitre.oval:def:2046", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2953", "name" : "oval:org.mitre.oval:def:2953", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3006", "name" : "oval:org.mitre.oval:def:3006", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4726", "name" : "oval:org.mitre.oval:def:4726", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4864", "name" : "oval:org.mitre.oval:def:4864", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the \"Drag-and-Drop Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0054", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110796851002781&w=2", "name" : "20050209 Internet Explorer zone spoofing with encoded URLs", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/580299", "name" : "VU#580299", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014", "name" : "MS05-014", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19214", "name" : "ie-file-url-encode(19214)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1308", "name" : "oval:org.mitre.oval:def:1308", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1736", "name" : "oval:org.mitre.oval:def:1736", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3060", "name" : "oval:org.mitre.oval:def:3060", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3196", "name" : "oval:org.mitre.oval:def:3196", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3586", "name" : "oval:org.mitre.oval:def:3586", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the \"URL Decoding Zone Spoofing Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0055", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/11165/", "name" : "11165", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2004-12/advisory/", "name" : "http://secunia.com/secunia_research/2004-12/advisory/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013125", "name" : "1013125", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/843771", "name" : "VU#843771", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014", "name" : "MS05-014", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137", "name" : "ie-cdf-execute-code(19137)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005", "name" : "oval:org.mitre.oval:def:1005", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692", "name" : "oval:org.mitre.oval:def:2692", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137", "name" : "oval:org.mitre.oval:def:3137", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910", "name" : "oval:org.mitre.oval:def:3910", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710", "name" : "oval:org.mitre.oval:def:710", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the \"DHTML Method Heap Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.0.1:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0056", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013126", "name" : "1013126", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/823971", "name" : "VU#823971", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12427", "name" : "12427", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014", "name" : "MS05-014", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19137", "name" : "ie-cdf-execute-code(19137)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385", "name" : "oval:org.mitre.oval:def:2385", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817", "name" : "oval:org.mitre.oval:def:2817", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3318", "name" : "oval:org.mitre.oval:def:3318", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4085", "name" : "oval:org.mitre.oval:def:4085", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4947", "name" : "oval:org.mitre.oval:def:4947", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the \"Channel Definition Format (CDF) Cross Domain Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0057", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14195", "name" : "14195", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013119", "name" : "1013119", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/820427", "name" : "VU#820427", "refsource" : "CERT-VN", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12479", "name" : "12479", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-039A.html", "name" : "TA05-039A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015", "name" : "MS05-015", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19110", "name" : "win-hyperlink-code-execution(19110)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570", "name" : "oval:org.mitre.oval:def:2570", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203", "name" : "oval:org.mitre.oval:def:3203", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713", "name" : "oval:org.mitre.oval:def:713", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an \"unchecked buffer\" in the library, possibly due to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0058", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/16354/", "name" : "16354", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014639", "name" : "1014639", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14518", "name" : "14518", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040", "name" : "MS05-040", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084", "name" : "oval:org.mitre.oval:def:100084", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085", "name" : "oval:org.mitre.oval:def:100085", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086", "name" : "oval:org.mitre.oval:def:100086", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088", "name" : "oval:org.mitre.oval:def:100088", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075", "name" : "oval:org.mitre.oval:def:1075", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213", "name" : "oval:org.mitre.oval:def:1213", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297", "name" : "oval:org.mitre.oval:def:1297", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-08-10T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0059", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017", "name" : "MS05-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384", "name" : "oval:org.mitre.oval:def:4384", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988", "name" : "oval:org.mitre.oval:def:4988", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0060", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111343529426926&w=2", "name" : "20050413 Windows kernel overflow fixed", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ngssoftware.com/advisories/ms-01.txt", "name" : "http://www.ngssoftware.com/advisories/ms-01.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018", "name" : "MS05-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562", "name" : "oval:org.mitre.oval:def:2562", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2731", "name" : "oval:org.mitre.oval:def:2731", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3941", "name" : "oval:org.mitre.oval:def:3941", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4797", "name" : "oval:org.mitre.oval:def:4797", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0061", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018", "name" : "MS05-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1656", "name" : "oval:org.mitre.oval:def:1656", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761", "name" : "oval:org.mitre.oval:def:1761", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3994", "name" : "oval:org.mitre.oval:def:3994", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4593", "name" : "oval:org.mitre.oval:def:4593", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0063", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111755356016155&w=2", "name" : "20050529 Spam exploiting MS05-016", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities", "name" : "20050412 Microsoft MSHTA Script Execution Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch" ] }, { "url" : "http://www.securiteam.com/exploits/5YP0T0AFFW.html", "name" : "http://www.securiteam.com/exploits/5YP0T0AFFW.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13132", "name" : "13132", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0335", "name" : "ADV-2005-0335", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016", "name" : "MS05-016", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184", "name" : "oval:org.mitre.oval:def:2184", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456", "name" : "oval:org.mitre.oval:def:3456", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407", "name" : "oval:org.mitre.oval:def:407", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710", "name" : "oval:org.mitre.oval:def:4710", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573", "name" : "oval:org.mitre.oval:def:573", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587", "name" : "oval:org.mitre.oval:def:587", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0064", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xpdf", "product" : { "product_data" : [ { "product_name" : "xpdf", "version" : { "version_data" : [ { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.5a", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7a", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" }, { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.91", "version_affected" : "=" }, { "version_value" : "0.91a", "version_affected" : "=" }, { "version_value" : "0.91b", "version_affected" : "=" }, { "version_value" : "0.91c", "version_affected" : "=" }, { "version_value" : "0.92", "version_affected" : "=" }, { "version_value" : "0.92a", "version_affected" : "=" }, { "version_value" : "0.92b", "version_affected" : "=" }, { "version_value" : "0.92c", "version_affected" : "=" }, { "version_value" : "0.92d", "version_affected" : "=" }, { "version_value" : "0.92e", "version_affected" : "=" }, { "version_value" : "0.93", "version_affected" : "=" }, { "version_value" : "0.93a", "version_affected" : "=" }, { "version_value" : "0.93b", "version_affected" : "=" }, { "version_value" : "0.93c", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0a", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch", "name" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt", "name" : "SCOSA-2005.42", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921", "name" : "CLA-2005:921", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110625368019554&w=2", "name" : "20050119 [USN-64-1] xpdf, CUPS vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17277", "name" : "17277", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-645", "name" : "DSA-645", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-648", "name" : "DSA-648", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities", "name" : "20050118 Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:016", "name" : "MDKSA-2005:016", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:017", "name" : "MDKSA-2005:017", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:018", "name" : "MDKSA-2005:018", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:019", "name" : "MDKSA-2005:019", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:020", "name" : "MDKSA-2005:020", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:021", "name" : "MDKSA-2005:021", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-026.html", "name" : "RHSA-2005:026", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html", "name" : "RHSA-2005:034", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html", "name" : "RHSA-2005:053", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html", "name" : "RHSA-2005:057", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-059.html", "name" : "RHSA-2005:059", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-066.html", "name" : "RHSA-2005:066", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2352", "name" : "FLSA:2352", "refsource" : "FEDORA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2353", "name" : "FLSA:2353", "refsource" : "FEDORA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11781", "name" : "oval:org.mitre.oval:def:11781", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://security.gentoo.org/glsa/200501-28", "name" : "GLSA-200501-28", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "https://security.gentoo.org/glsa/200502-10", "name" : "GLSA-200502-10", "refsource" : "GENTOO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.80:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.91a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.91b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.91c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.93a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.93b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.93c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0065", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tcp", "product" : { "product_data" : [ { "product_name" : "tcp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "name" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13124", "name" : "13124", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka \"TCP sequence number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0066", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tcp", "product" : { "product_data" : [ { "product_name" : "tcp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "name" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13124", "name" : "13124", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka \"TCP acknowledgement number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-12-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0067", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tcp", "product" : { "product_data" : [ { "product_name" : "tcp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "name" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13124", "name" : "13124", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The original design of TCP does not require that port numbers be assigned randomly (aka \"Port randomization\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-12-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0068", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tcp", "product" : { "product_data" : [ { "product_name" : "tcp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "name" : "http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13124", "name" : "13124", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-12-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0069", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vim_development_group", "product" : { "product_data" : [ { "product_name" : "vim", "version" : { "version_data" : [ { "version_value" : "6.3.011", "version_affected" : "=" }, { "version_value" : "6.3.025", "version_affected" : "=" }, { "version_value" : "6.3.030", "version_affected" : "=" }, { "version_value" : "6.3.044", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110608387001863&w=2", "name" : "20050118 [USN-61-1] vim vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13841/", "name" : "13841", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012938", "name" : "1012938", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-036.html", "name" : "RHSA-2005:036", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-122.html", "name" : "RHSA-2005:122", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2343", "name" : "FLSA:2343", "refsource" : "FEDORA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18870", "name" : "vim-symlink(18870)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402", "name" : "oval:org.mitre.oval:def:9402", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vim_development_group:vim:6.3.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vim_development_group:vim:6.3.025:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vim_development_group:vim:6.3.030:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vim_development_group:vim:6.3.044:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-13T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0070", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "synaesthesia", "product" : { "product_data" : [ { "product_name" : "synaesthesia", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14300", "name" : "14300", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013206", "name" : "1013206", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-681", "name" : "DSA-681", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12546", "name" : "12546", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:synaesthesia:synaesthesia:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0071", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vdr", "product" : { "product_data" : [ { "product_name" : "vdr", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13930", "name" : "13930", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13995", "name" : "13995", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14066", "name" : "14066", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-656", "name" : "DSA-656", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml", "name" : "GLSA-200501-42", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12356", "name" : "12356", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19066", "name" : "vdr-dvdapi-file-overwrite(19066)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vdr:vdr:1.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0072", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ejoy_and_hu_yong", "product" : { "product_data" : [ { "product_name" : "zhcon", "version" : { "version_data" : [ { "version_value" : "0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13977", "name" : "13977", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13982", "name" : "13982", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13987", "name" : "13987", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012977", "name" : "1012977", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-655", "name" : "DSA-655", "refsource" : "DEBIAN", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:012", "name" : "MDKSA-2005:012", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12343", "name" : "12343", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19045", "name" : "zhcon-information-disclosure(19045)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ejoy_and_hu_yong:zhcon:0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0073", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "sympa", "version" : { "version_data" : [ { "version_value" : "3.3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14217", "name" : "14217", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14224", "name" : "14224", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013163", "name" : "1013163", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-677", "name" : "DSA-677", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:sympa:3.3.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0074", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xpcd", "product" : { "product_data" : [ { "product_name" : "xpcd", "version" : { "version_data" : [ { "version_value" : "2.08", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14248", "name" : "14248", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14250", "name" : "14250", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013162", "name" : "1013162", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-676", "name" : "DSA-676", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12523", "name" : "12523", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpcd:xpcd:2.08:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-11T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0075", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "squirrelmail", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.3a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2", "name" : "20050129 SquirrelMail Security Advisory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13962/", "name" : "13962", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml", "name" : "GLSA-200501-39", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html", "name" : "RHSA-2005:099", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html", "name" : "RHSA-2005:135", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.squirrelmail.org/security/issue/2005-01-14", "name" : "http://www.squirrelmail.org/security/issue/2005-01-14", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587", "name" : "oval:org.mitre.oval:def:9587", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-29T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0076", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-672", "name" : "DSA-672", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19271", "name" : "xview-xvparseone-bo(19271)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0077", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110667936707597&w=2", "name" : "20050125 [USN-70-1] Perl DBI module vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14015", "name" : "14015", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14050", "name" : "14050", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013007", "name" : "1013007", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-658", "name" : "DSA-658", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml", "name" : "GLSA-200501-38", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:030", "name" : "MDKSA-2005:030", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-072.html", "name" : "RHSA-2005:072", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/426530/30/6600/threaded", "name" : "FLSA-2006:178989", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12360", "name" : "12360", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19068", "name" : "dbi-library-file-overwrite(19068)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10552", "name" : "oval:org.mitre.oval:def:10552", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:woody:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0078", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1_beta1", "version_affected" : "=" }, { "version_value" : "2.1_beta2", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2_beta1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0_beta_1", "version_affected" : "=" }, { "version_value" : "3.0_beta_2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "linux_advanced_workstation", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-660", "name" : "DSA-660", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-009.html", "name" : "RHSA-2005:009", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19084", "name" : "kdebase-screensaver-security-bypass(19084)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9260", "name" : "oval:org.mitre.oval:def:9260", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:woody:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.1_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.1_beta2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:2.2_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0_beta_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.0_beta_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0079", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xtrlock", "product" : { "product_data" : [ { "product_name" : "xtrlock", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13938", "name" : "13938", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-649", "name" : "DSA-649", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12316", "name" : "12316", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18991", "name" : "xtrlock-screen-lock-bypass(18991)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xtrlock:xtrlock:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0080", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "mailman", "version" : { "version_data" : [ { "version_value" : "2.1.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110549296126351&w=2", "name" : "20050110 [USN-59-1] mailman vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://qa.debian.org/bts-security.html", "name" : "http://qa.debian.org/bts-security.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0081", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "maxdb", "version" : { "version_data" : [ { "version_value" : "7.5.00", "version_affected" : "=" }, { "version_value" : "7.5.00.08", "version_affected" : "=" }, { "version_value" : "7.5.00.11", "version_affected" : "=" }, { "version_value" : "7.5.00.12", "version_affected" : "=" }, { "version_value" : "7.5.00.14", "version_affected" : "=" }, { "version_value" : "7.5.00.15", "version_affected" : "=" }, { "version_value" : "7.5.00.16", "version_affected" : "=" }, { "version_value" : "7.5.00.18", "version_affected" : "=" }, { "version_value" : "7.5.00.19", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities", "name" : "20050119 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0082", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "maxdb", "version" : { "version_data" : [ { "version_value" : "7.5.00", "version_affected" : "=" }, { "version_value" : "7.5.00.08", "version_affected" : "=" }, { "version_value" : "7.5.00.11", "version_affected" : "=" }, { "version_value" : "7.5.00.12", "version_affected" : "=" }, { "version_value" : "7.5.00.14", "version_affected" : "=" }, { "version_value" : "7.5.00.15", "version_affected" : "=" }, { "version_value" : "7.5.00.16", "version_affected" : "=" }, { "version_value" : "7.5.00.18", "version_affected" : "=" }, { "version_value" : "7.5.00.19", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities", "name" : "20050119 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0083", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "maxdb", "version" : { "version_data" : [ { "version_value" : "7.5.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities", "name" : "20050314 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19687", "name" : "maxdb-null-pointer-dos(19687)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0084", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.8.13", "version_affected" : "=" }, { "version_value" : "0.8.14", "version_affected" : "=" }, { "version_value" : "0.8.15", "version_affected" : "=" }, { "version_value" : "0.8.16", "version_affected" : "=" }, { "version_value" : "0.8.17a", "version_affected" : "=" }, { "version_value" : "0.8.18", "version_affected" : "=" }, { "version_value" : "0.8.19", "version_affected" : "=" }, { "version_value" : "0.8.20", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.10", "version_affected" : "=" }, { "version_value" : "0.9.11", "version_affected" : "=" }, { "version_value" : "0.9.12", "version_affected" : "=" }, { "version_value" : "0.9.13", "version_affected" : "=" }, { "version_value" : "0.9.14", "version_affected" : "=" }, { "version_value" : "0.9.15", "version_affected" : "=" }, { "version_value" : "0.9.16", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.0a", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.10.5", "version_affected" : "=" }, { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13946/", "name" : "13946", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-106.shtml", "name" : "P-106", "refsource" : "CIAC", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-653", "name" : "DSA-653", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00017.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml", "name" : "GLSA-200501-27", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:013", "name" : "MDKSA-2005:013", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-037.html", "name" : "RHSA-2005:037", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12326", "name" : "12326", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19004", "name" : "ethereal-x11-bo(19004)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9140", "name" : "oval:org.mitre.oval:def:9140", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0085", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "htdig", "product" : { "product_data" : [ { "product_name" : "htdig", "version" : { "version_data" : [ { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.5_7", "version_affected" : "=" }, { "version_value" : "3.1.5_8", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.0b2", "version_affected" : "=" }, { "version_value" : "3.2.0b3", "version_affected" : "=" }, { "version_value" : "3.2.0b4", "version_affected" : "=" }, { "version_value" : "3.2.0b5", "version_affected" : "=" }, { "version_value" : "3.2.0b6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt", "name" : "SCOSA-2005.46", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14255", "name" : "14255", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14276", "name" : "14276", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14303", "name" : "14303", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14795", "name" : "14795", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15007", "name" : "15007", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17414", "name" : "17414", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17415", "name" : "17415", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013078", "name" : "1013078", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-680", "name" : "DSA-680", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml", "name" : "GLSA-200502-16", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:063", "name" : "MDKSA-2005:063", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html", "name" : "FLSA-2006:152907", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-073.html", "name" : "RHSA-2005:073", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-090.html", "name" : "RHSA-2005:090", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12442", "name" : "12442", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19223", "name" : "htdig-config-xss(19223)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878", "name" : "oval:org.mitre.oval:def:10878", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.1.5_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.1.5_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0b2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0b3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0b4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0b5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:htdig:htdig:3.2.0b6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0086", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-068.html", "name" : "RHSA-2005:068", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.fedora.us/show_bug.cgi?id=2404", "name" : "FLSA:2404", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19131", "name" : "less-file-bo(19131)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11027", "name" : "oval:org.mitre.oval:def:11027", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0087", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alsa-project", "product" : { "product_data" : [ { "product_name" : "alsa-lib", "version" : { "version_data" : [ { "version_value" : "1.0.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-033.html", "name" : "RHSA-2005:033", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10355", "name" : "oval:org.mitre.oval:def:10355", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alsa-project:alsa-lib:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2020-05-22T15:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0088", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "mod_python", "version" : { "version_data" : [ { "version_value" : "1.9a", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926", "name" : "CLA-2005:926", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110815313218389&w=2", "name" : "20050211 [USN-80-1] mod_python vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-14.xml", "name" : "GLSA-200502-14", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013156", "name" : "1013156", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-689", "name" : "DSA-689", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/356409", "name" : "VU#356409", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-100.html", "name" : "RHSA-2005:100", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-104.html", "name" : "RHSA-2005:104", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/430286/100/0/threaded", "name" : "FLSA:152896", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12519", "name" : "12519", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617", "name" : "oval:org.mitre.oval:def:10617", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:1.9a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.7.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0089", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "python_software_foundation", "product" : { "product_data" : [ { "product_name" : "python", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110746469728728&w=2", "name" : "20050203 Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://python.org/security/PSF-2005-001/patch-2.2.txt", "name" : "http://python.org/security/PSF-2005-001/patch-2.2.txt", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14128", "name" : "14128", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013083", "name" : "1013083", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-666", "name" : "DSA-666", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:035", "name" : "MDKSA-2005:035", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.python.org/security/PSF-2005-001/", "name" : "http://www.python.org/security/PSF-2005-001/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-108.html", "name" : "RHSA-2005:108", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12437", "name" : "12437", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19217", "name" : "python-simplexmlrpcserver-bypass(19217)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811", "name" : "oval:org.mitre.oval:def:9811", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python_software_foundation:python:2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0090", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12599", "name" : "12599", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20618", "name" : "red-hat-regression-dos(20618)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10425", "name" : "oval:org.mitre.oval:def:10425", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an \"access check,\" which allows local users to cause a denial of service (crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0091", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12599", "name" : "12599", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20619", "name" : "red-hat-patch-gain-privileges(20619)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11249", "name" : "oval:org.mitre.oval:def:11249", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0092", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12599", "name" : "12599", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20620", "name" : "red-hat-patch-dos(20620)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11647", "name" : "oval:org.mitre.oval:def:11647", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-19T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0093", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0094", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" }, { "version_value" : "2.6.stable1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923", "name" : "CLA-2005:923", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13825", "name" : "13825", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml", "name" : "GLSA-200501-25", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-651", "name" : "DSA-651", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014", "name" : "MDKSA-2005:014", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12276", "name" : "12276", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_1.txt", "name" : "http://www.squid-cache.org/Advisories/SQUID-2005_1.txt", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146", "name" : "oval:org.mitre.oval:def:11146", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-15T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" }, { "version_value" : "2.6.stable1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923", "name" : "CLA-2005:923", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13825", "name" : "13825", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml", "name" : "GLSA-200501-25", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012882", "name" : "1012882", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-651", "name" : "DSA-651", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:014", "name" : "MDKSA-2005:014", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/12886", "name" : "12886", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12275", "name" : "12275", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_2.txt", "name" : "http://www.squid-cache.org/Advisories/SQUID-2005_2.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269", "name" : "oval:org.mitre.oval:def:10269", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-15T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0096", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" }, { "version_value" : "2.6.stable1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923", "name" : "CLA-2005:923", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml", "name" : "GLSA-200501-25", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012818", "name" : "1012818", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12324", "name" : "12324", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10233", "name" : "oval:org.mitre.oval:def:10233", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-25T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0097", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" }, { "version_value" : "2.6.stable1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13789", "name" : "13789", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-25.xml", "name" : "GLSA-200501-25", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012818", "name" : "1012818", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12220", "name" : "12220", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11646", "name" : "oval:org.mitre.oval:def:11646", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-11T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0098", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "abuse", "product" : { "product_data" : [ { "product_name" : "abuse-sdl", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14495", "name" : "14495", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-691", "name" : "DSA-691", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:abuse:abuse-sdl:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0099", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "abuse", "product" : { "product_data" : [ { "product_name" : "abuse-sdl", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14495", "name" : "14495", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-691", "name" : "DSA-691", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14610", "name" : "14610", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:abuse:abuse-sdl:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0100", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "emacs", "version" : { "version_data" : [ { "version_value" : "20.0", "version_affected" : "<=" }, { "version_value" : "21.3", "version_affected" : "=" } ] } }, { "product_name" : "xemacs", "version" : { "version_data" : [ { "version_value" : "21.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110780416112719&w=2", "name" : "20050207 [USN-76-1] Emacs vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-670", "name" : "DSA-670", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-671", "name" : "DSA-671", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-685", "name" : "DSA-685", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:038", "name" : "MDKSA-2005:038", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-110.html", "name" : "RHSA-2005:110", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-112.html", "name" : "RHSA-2005:112", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-133.html", "name" : "RHSA-2005:133", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/433928/30/5010/threaded", "name" : "FLSA-2006:152898", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12462", "name" : "12462", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19246", "name" : "xemacs-movemail-format-string(19246)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408", "name" : "oval:org.mitre.oval:def:9408", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*", "versionEndIncluding" : "20.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:emacs:21.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:xemacs:*:*:*:*:*:*:*:*", "versionEndIncluding" : "21.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-07T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0101", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "newspost", "product" : { "product_data" : [ { "product_name" : "newspost", "version" : { "version_data" : [ { "version_value" : "2.1.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110746336728781&w=2", "name" : "20050202 RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://people.freebsd.org/~niels/issues/newspost-20050114.txt", "name" : "http://people.freebsd.org/~niels/issues/newspost-20050114.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14092/", "name" : "14092", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14098", "name" : "14098", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-05.xml", "name" : "GLSA-200502-05", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013056", "name" : "1013056", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12418", "name" : "12418", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html", "name" : "http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19178", "name" : "newspost-socketgetline-bo(19178)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newspost:newspost:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.1.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-01T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0102", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ximian", "product" : { "product_data" : [ { "product_name" : "evolution", "version" : { "version_data" : [ { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.3.2_beta", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925", "name" : "CLA-2005:925", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/13830", "name" : "13830", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200501-35.xml", "name" : "GLSA-200501-35", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012981", "name" : "1012981", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-673", "name" : "DSA-673", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:024", "name" : "MDKSA-2005:024", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-238.html", "name" : "RHSA-2005:238", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html", "name" : "RHSA-2005:397", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12354", "name" : "12354", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19031", "name" : "evolution-camellockhelper-bo(19031)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9616", "name" : "oval:org.mitre.oval:def:9616", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/69-1/", "name" : "USN-69-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ximian:evolution:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ximian:evolution:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ximian:evolution:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ximian:evolution:1.3.2_beta:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0103", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "squirrelmail", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.3_rc1", "version_affected" : "=" }, { "version_value" : "1.4.3a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2", "name" : "20050129 SquirrelMail Security Advisory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13962/", "name" : "13962", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml", "name" : "GLSA-200501-39", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html", "name" : "RHSA-2005:099", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html", "name" : "RHSA-2005:135", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223", "name" : "http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19037", "name" : "squirrelmail-frame-file-include(19037)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670", "name" : "oval:org.mitre.oval:def:10670", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0104", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "squirrelmail", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.3_rc1", "version_affected" : "=" }, { "version_value" : "1.4.3a", "version_affected" : "=" }, { "version_value" : "1.44", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110702772714662&w=2", "name" : "20050129 SquirrelMail Security Advisory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13962/", "name" : "13962", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14096", "name" : "14096", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-662", "name" : "DSA-662", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml", "name" : "GLSA-200501-39", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-099.html", "name" : "RHSA-2005:099", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-135.html", "name" : "RHSA-2005:135", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.squirrelmail.org/security/issue/2005-01-20", "name" : "http://www.squirrelmail.org/security/issue/2005-01-20", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19036", "name" : "squirrelmail-webmailphp-xss(19036)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10568", "name" : "oval:org.mitre.oval:def:10568", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-29T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0105", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typespeed", "product" : { "product_data" : [ { "product_name" : "typespeed", "version" : { "version_data" : [ { "version_value" : "0.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-684", "name" : "DSA-684", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typespeed:typespeed:0.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-16T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0106", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "5.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/18639", "name" : "18639", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:023", "name" : "MDKSA-2006:023", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13471", "name" : "13471", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/113-1/", "name" : "USN-113-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-03T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0107", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "bsmtpd", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-690", "name" : "DSA-690", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:bsmtpd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-25T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0108", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "mod_auth_radius", "version" : { "version_data" : [ { "version_value" : "1.5.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110548193312050&w=2", "name" : "20050111 Apache mod_auth_radius remote integer overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13773", "name" : "13773", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14046", "name" : "14046", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02", "name" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012829", "name" : "1012829", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-659", "name" : "DSA-659", "refsource" : "DEBIAN", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12217", "name" : "12217", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18841", "name" : "modauthradius-dos(18841)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:mod_auth_radius:1.5.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-11T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0109", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "1.1.5.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.6.1", "version_affected" : "=" }, { "version_value" : "2.1.7.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sco", "product" : { "product_data" : [ { "product_name" : "openserver", "version" : { "version_data" : [ { "version_value" : "5.0.7", "version_affected" : "=" } ] } }, { "product_name" : "unixware", "version" : { "version_data" : [ { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.3_up", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "5.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt", "name" : "SCOSA-2005.24", "refsource" : "SCO", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2", "name" : "[freebsd-hackers] 20050304 Re: FW:FreeBSD hiding security stuff", "refsource" : "MLIST", "tags" : [ "Mailing List" ] }, { "url" : "http://marc.info/?l=freebsd-security&m=110994370429609&w=2", "name" : "[freebsd-security] 20050304 [Fwd: Re: FW:FreeBSD hiding security stuff]", "refsource" : "MLIST", "tags" : [ "Mailing List" ] }, { "url" : "http://marc.info/?l=openbsd-misc&m=110995101417256&w=2", "name" : "[openbsd-misc] 20050304 Re: FreeBSD hiding security stuff", "refsource" : "MLIST", "tags" : [ "Mailing List" ] }, { "url" : "http://secunia.com/advisories/15348", "name" : "15348", "refsource" : "SECUNIA", "tags" : [ "Permissions Required" ] }, { "url" : "http://secunia.com/advisories/18165", "name" : "18165", "refsource" : "SECUNIA", "tags" : [ "Permissions Required" ] }, { "url" : "http://securitytracker.com/id?1013967", "name" : "1013967", "refsource" : "SECTRACK", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1", "name" : "101739", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.daemonology.net/hyperthreading-considered-harmful/", "name" : "http://www.daemonology.net/hyperthreading-considered-harmful/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.daemonology.net/papers/htt.pdf", "name" : "http://www.daemonology.net/papers/htt.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/911878", "name" : "VU#911878", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-476.html", "name" : "RHSA-2005:476", "refsource" : "REDHAT", "tags" : [ "Not Applicable" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-800.html", "name" : "RHSA-2005:800", "refsource" : "REDHAT", "tags" : [ "Not Applicable" ] }, { "url" : "http://www.securityfocus.com/bid/12724", "name" : "12724", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0540", "name" : "ADV-2005-0540", "refsource" : "VUPEN", "tags" : [ "Permissions Required" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/3002", "name" : "ADV-2005-3002", "refsource" : "VUPEN", "tags" : [ "Permissions Required" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754", "name" : "http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747", "name" : "oval:org.mitre.oval:def:9747", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.3_up:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.6, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.1, "impactScore" : 4.0 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-05T05:00Z", "lastModifiedDate" : "2018-10-16T12:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0110", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110569119106172&w=2", "name" : "20050114 Internet Explorer (SP2) - Remote File Download", "refsource" : "FULLDISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-01-14T05:00Z", "lastModifiedDate" : "2016-10-18T03:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0111", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "maxdb", "version" : { "version_data" : [ { "version_value" : "7.5.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1012893", "name" : "1012893", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=181&type=vulnerabilities", "name" : "20050113 MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12265", "name" : "12265", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-13T05:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0112", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3crwe454g72", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.2.11", "version_affected" : "=" }, { "version_value" : "1.0.3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13942", "name" : "13942", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012958", "name" : "1012958", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities", "name" : "20050120 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12322", "name" : "12322", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18994", "name" : "3com-officeconnect-information-disclosure(18994)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:3com:3crwe454g72:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:3com:3crwe454g72:1.0.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:3com:3crwe454g72:1.0.3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0113", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "irix", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13858", "name" : "13858", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012894", "name" : "1012894", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=182&type=vulnerabilities", "name" : "20050113 SGI IRIX inpview Design Error Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/12915", "name" : "12915", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12259", "name" : "12259", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18894", "name" : "irix-inpview-gain-privileges(18894)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0114", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "checkpoint", "product" : { "product_data" : [ { "product_name" : "check_point_integrity_client", "version" : { "version_data" : [ { "version_value" : "4.5.122.000", "version_affected" : "=" }, { "version_value" : "5.1.556.166", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "zonelabs", "product" : { "product_data" : [ { "product_name" : "zonealarm", "version" : { "version_data" : [ { "version_value" : "5.5.062.011", "version_affected" : "=" } ] } }, { "product_name" : "zonealarm_wireless_security", "version" : { "version_data" : [ { "version_value" : "5.5.080.000", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://download.zonelabs.com/bin/free/securityAlert/19.html", "name" : "http://download.zonelabs.com/bin/free/securityAlert/19.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14256", "name" : "14256", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities", "name" : "20050211 ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12531", "name" : "12531", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:check_point_integrity_client:4.5.122.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:check_point_integrity_client:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.556.166" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zonelabs:zonealarm:5.5.062.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zonelabs:zonealarm_wireless_security:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.080.000" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-11T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0115", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "datarescue", "product" : { "product_data" : [ { "product_name" : "ida", "version" : { "version_data" : [ { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13980", "name" : "13980", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012975", "name" : "1012975", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html", "name" : "http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities", "name" : "20050124 DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12353", "name" : "12353", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042", "name" : "database-ida-portable-executable-bo(19042)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:datarescue:ida:4.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0116", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://awstats.sourceforge.net/docs/awstats_changelog.txt", "name" : "http://awstats.sourceforge.net/docs/awstats_changelog.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf", "name" : "http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13893/", "name" : "13893", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false", "name" : "20050117 AWStats Remote Command Execution Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/272296", "name" : "VU#272296", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.osvdb.org/13002", "name" : "13002", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12298", "name" : "12298", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-18T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0117", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xshisen", "product" : { "product_data" : [ { "product_name" : "xshisen", "version" : { "version_data" : [ { "version_value" : "1.36", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html", "name" : "http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xshisen:xshisen:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.36" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-11T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0118", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "helvis", "product" : { "product_data" : [ { "product_name" : "helvis", "version" : { "version_data" : [ { "version_value" : "1.8h2_1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html", "name" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.8h2_1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0119", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "helvis", "product" : { "product_data" : [ { "product_name" : "helvis", "version" : { "version_data" : [ { "version_value" : "1.8h2_1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html", "name" : "http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.8h2_1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0120", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt", "name" : "http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:helvis:helvis:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.8h2_1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0121", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alexander_siegel", "product" : { "product_data" : [ { "product_name" : "golddig", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html", "name" : "http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19039", "name" : "golddig-long-mapname-bo(19039)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19040", "name" : "golddig-long-username-bo(19040)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alexander_siegel:golddig:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0975. Reason: This candidate is a duplicate of CVE-2005-0975. Notes: All CVE users should reference CVE-2005-0975 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2008-09-10T19:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0123", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0124", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/linux-kernel/2004/Dec/3914.html", "name" : "[linux-kernel] 20041216 [Coverity] Untrusted user data in kernel", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/1089.html", "name" : "[linux-kernel] 20050105 Re: [Coverity] Untrusted user data in kernel", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2018.html", "name" : "[linux-kernel] 20050107 [PATCH 2.4.29-pre3-bk4] fs/coda Re: [Coverity] Untrusted user data in kernel", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://seclists.org/lists/linux-kernel/2005/Jan/2020.html", "name" : "[linux-kernel] 20050107 [PATCH 2.6.10-mm2] fs/coda Re: [Coverity] Untrusted user data in kernel", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18684", "name" : "18684", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/19374", "name" : "19374", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013018", "name" : "1013018", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1017", "name" : "DSA-1017", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html", "name" : "RHSA-2006:0191", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/428028/100/0/threaded", "name" : "FLSA:157459-1", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14967", "name" : "14967", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11690", "name" : "oval:org.mitre.oval:def:11690", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0125", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html", "name" : "APPLE-SA-2005-01-25", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110685027017411&w=2", "name" : "20050127 DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid'", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.digitalmunition.com/DMA[2005-0127a].txt", "name" : "http://www.digitalmunition.com/DMA[2005-0127a].txt", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "http://www.kb.cert.org/vuls/id/678150", "name" : "VU#678150", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18981", "name" : "macos-at-gain-privileges(18981)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The \"at\" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to batch, which generates a job file that is readable by the local user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0126", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html", "name" : "APPLE-SA-2005-01-25", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013000", "name" : "1013000", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/980078", "name" : "VU#980078", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12367", "name" : "12367", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19083", "name" : "macos-icc-profile-bo(19083)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0127", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3.7", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html", "name" : "APPLE-SA-2005-01-25", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14005", "name" : "14005", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013001", "name" : "1013001", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/464662", "name" : "VU#464662", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19085", "name" : "macos-ethernet-address-disclosure(19085)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0128", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0129", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "berlios", "product" : { "product_data" : [ { "product_name" : "konversation", "version" : { "version_data" : [ { "version_value" : "0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13919", "name" : "13919", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13989", "name" : "13989", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012972", "name" : "1012972", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml", "name" : "GLSA-200501-34", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12312", "name" : "12312", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19025", "name" : "konversation-expansion-execute-code(19025)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing \"%\" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0130", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "berlios", "product" : { "product_data" : [ { "product_name" : "konversation", "version" : { "version_data" : [ { "version_value" : "0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13919", "name" : "13919", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13989", "name" : "13989", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012972", "name" : "1012972", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml", "name" : "GLSA-200501-34", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12312", "name" : "12312", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19008", "name" : "konversation-perlscript-execute-code(19008)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0131", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "berlios", "product" : { "product_data" : [ { "product_name" : "konversation", "version" : { "version_data" : [ { "version_value" : "0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110626383310742&w=2", "name" : "20050119 Multiple vulnerabilities in Konversation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13919", "name" : "13919", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13989", "name" : "13989", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012972", "name" : "1012972", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml", "name" : "GLSA-200501-34", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050121-1.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12312", "name" : "12312", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19038", "name" : "konversation-nick-password-information-disclosure(19038)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:berlios:konversation:0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0133", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "clam_anti-virus", "product" : { "product_data" : [ { "product_name" : "clamav", "version" : { "version_data" : [ { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.52", "version_affected" : "=" }, { "version_value" : "0.53", "version_affected" : "=" }, { "version_value" : "0.54", "version_affected" : "=" }, { "version_value" : "0.60", "version_affected" : "=" }, { "version_value" : "0.65", "version_affected" : "=" }, { "version_value" : "0.67", "version_affected" : "=" }, { "version_value" : "0.68", "version_affected" : "=" }, { "version_value" : "0.68.1", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928", "name" : "CLA-2005:928", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116", "name" : "http://sourceforge.net/project/shownotes.php?release_id=300116", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml", "name" : "GLSA-200501-46", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025", "name" : "MDKSA-2005:025", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0134", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sco", "product" : { "product_data" : [ { "product_name" : "unixware", "version" : { "version_data" : [ { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt", "name" : "SCOSA-2005.8", "refsource" : "SCO", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0077", "name" : "ADV-2005-0077", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-18T04:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0135", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@41f2beablXVnAs_6fznhhITh1j5hZg", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@41f2beablXVnAs_6fznhhITh1j5hZg", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15019", "name" : "15019", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html", "name" : "RHSA-2005:284", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13266", "name" : "13266", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9040", "name" : "oval:org.mitre.oval:def:9040", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0136", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.8.1.5", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.alioth.debian.org/pipermail/kernel-svn-changes/2005-August/002597.html", "name" : "[kernel-svn-changes] 20050816 r3920 - in branches/dist/sarge-security: . kernel kernel/i386 kernel/source kernel/source/kernel-source-2.6.8-2.6.8/debian", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://openvz.org/news/updates/kernel-022stab045.1-released", "name" : "http://openvz.org/news/updates/kernel-022stab045.1-released", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gelato.unsw.edu.au/archives/linux-ia64/0409/11073.html", "name" : "[linux-ia64] 20040916 Re: [Patch] Per CPU MCA/INIT data save areas", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html", "name" : "RHSA-2005:420", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11628", "name" : "oval:org.mitre.oval:def:11628", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain \"ptrace corner cases\" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0137", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html", "name" : "RHSA-2005:284", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11039", "name" : "oval:org.mitre.oval:def:11039", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a \"missing Itanium syscall table entry.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0138", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "irix", "version" : { "version_data" : [ { "version_value" : "6.5.25", "version_affected" : "=" }, { "version_value" : "6.5.26", "version_affected" : "=" }, { "version_value" : "6.5.27", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-17" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U", "name" : "20050601-01-U", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/15619", "name" : "15619", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml", "name" : "P-214", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0702", "name" : "ADV-2005-0702", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.27:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-09-21T20:03Z", "lastModifiedDate" : "2016-05-09T15:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0139", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "irix", "version" : { "version_data" : [ { "version_value" : "6.5.25", "version_affected" : "=" }, { "version_value" : "6.5.26", "version_affected" : "=" }, { "version_value" : "6.5.27", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U", "name" : "20050601-01-U", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/15619", "name" : "15619", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-214.shtml", "name" : "P-214", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0702", "name" : "ADV-2005-0702", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.27:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-09-21T20:03Z", "lastModifiedDate" : "2016-05-09T16:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0140", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "peid", "product" : { "product_data" : [ { "product_name" : "peid", "version" : { "version_data" : [ { "version_value" : "0.92", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13984", "name" : "13984", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities", "name" : "20050124 DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12355", "name" : "12355", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19042", "name" : "database-ida-portable-executable-bo(19042)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:peid:peid:0.92:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0141", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-01.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-01.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=249332", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=249332", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19168", "name" : "mozilla-firefox-file-upload(19168)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057", "name" : "oval:org.mitre.oval:def:100057", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756", "name" : "oval:org.mitre.oval:def:10756", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links \"with a custom getter and toString method\" that are middle-clicked by the user to be opened in a new tab." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0142", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-02.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=251297", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=251297", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17832", "name" : "mozilla-world-readable(17832)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056", "name" : "oval:org.mitre.oval:def:100056", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9543", "name" : "oval:org.mitre.oval:def:9543", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0143", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.2.1", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4.1", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.35", "version_affected" : "=" }, { "version_value" : "0.9.48", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-03.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-03.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=257308", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=257308", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19166", "name" : "mozilla-ssl-spoofing(19166)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100055", "name" : "oval:org.mitre.oval:def:100055", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11297", "name" : "oval:org.mitre.oval:def:11297", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0144", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-04.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-04.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=262689", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=262689", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19169", "name" : "mozilla-ssl-view-source-spoofing(19169)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100054", "name" : "oval:org.mitre.oval:def:100054", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11016", "name" : "oval:org.mitre.oval:def:11016", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0145", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-07.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-07.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265176", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265176", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19170", "name" : "mozilla-script-click-event-bypass(19170)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100051", "name" : "oval:org.mitre.oval:def:100051", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0146", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-08.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-08.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265728", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265728", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19171", "name" : "mozilla-middle-click-information-disclosure(19171)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362", "name" : "oval:org.mitre.oval:def:10362", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0147", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-09.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-09.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267263", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267263", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19174", "name" : "mozilla-407-proxy-obtain-information(19174)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100049", "name" : "oval:org.mitre.oval:def:100049", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9578", "name" : "oval:org.mitre.oval:def:9578", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0148", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-10.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-10.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=263546", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=263546", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19173", "name" : "thunderbird-javascript-handler-launch(19173)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100048", "name" : "oval:org.mitre.oval:def:100048", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0149", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-11.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-11.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-094.html", "name" : "RHSA-2005:094", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268107", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268107", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19172", "name" : "mozilla-cookie-policy-bypass(19172)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047", "name" : "oval:org.mitre.oval:def:100047", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407", "name" : "oval:org.mitre.oval:def:11407", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-15T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0150", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/mfsa2005-12.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12407", "name" : "12407", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265668", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265668", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19187", "name" : "mozilla-firefox-livefeed-xss(19187)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100046", "name" : "oval:org.mitre.oval:def:100046", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-26T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0151", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "creative_suite", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "photoshop", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } }, { "product_name" : "premiere", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1014168", "name" : "1014168", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1014169", "name" : "1014169", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1014170", "name" : "1014170", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/techdocs/331688.html", "name" : "http://www.adobe.com/support/techdocs/331688.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:creative_suite:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:premiere:1.5:*:pro:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-13T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0152", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "squirrelmail", "version" : { "version_data" : [ { "version_value" : "1.2.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes", "name" : "http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14096", "name" : "14096", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-662", "name" : "DSA-662", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/203214", "name" : "VU#203214", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via \"URL manipulation.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0155", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "larry_wall", "product" : { "product_data" : [ { "product_name" : "perl", "version" : { "version_data" : [ { "version_value" : "5.8.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056", "name" : "CLSA-2006:1056", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152845", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2", "name" : "20050202 [USN-72-1] Perl vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110779723332339&w=2", "name" : "20050207 DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation'", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14120", "name" : "14120", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/21646", "name" : "21646", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm", "name" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.digitalmunition.com/DMA[2005-0131a].txt", "name" : "http://www.digitalmunition.com/DMA[2005-0131a].txt", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml", "name" : "GLSA-200502-13", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031", "name" : "MDKSA-2005:031", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html", "name" : "RHSA-2005:103", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html", "name" : "RHSA-2005:105", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12426", "name" : "12426", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19207", "name" : "perl-perliodebug-file-overwrite(19207)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404", "name" : "oval:org.mitre.oval:def:10404", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0156", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "larry_wall", "product" : { "product_data" : [ { "product_name" : "perl", "version" : { "version_data" : [ { "version_value" : "5.8.0", "version_affected" : "=" }, { "version_value" : "5.8.1", "version_affected" : "=" }, { "version_value" : "5.8.3", "version_affected" : "=" }, { "version_value" : "5.8.4", "version_affected" : "=" }, { "version_value" : "5.8.4.1", "version_affected" : "=" }, { "version_value" : "5.8.4.2", "version_affected" : "=" }, { "version_value" : "5.8.4.2.3", "version_affected" : "=" }, { "version_value" : "5.8.4.3", "version_affected" : "=" }, { "version_value" : "5.8.4.4", "version_affected" : "=" }, { "version_value" : "5.8.4.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "trustix", "product" : { "product_data" : [ { "product_name" : "secure_linux", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056", "name" : "CLSA-2006:1056", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152845", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110737149402683&w=2", "name" : "20050202 [USN-72-1] Perl vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110779721503111&w=2", "name" : "20050207 DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14120", "name" : "14120", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55314", "name" : "55314", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.digitalmunition.com/DMA[2005-0131b].txt", "name" : "http://www.digitalmunition.com/DMA[2005-0131b].txt", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml", "name" : "GLSA-200502-13", "refsource" : "GENTOO", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:031", "name" : "MDKSA-2005:031", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-103.html", "name" : "RHSA-2005:103", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-105.html", "name" : "RHSA-2005:105", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12426", "name" : "12426", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19208", "name" : "perl-perliodebug-bo(19208)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803", "name" : "oval:org.mitre.oval:def:10803", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-07T05:00Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0157", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "smartlist", "product" : { "product_data" : [ { "product_name" : "smartlist", "version" : { "version_data" : [ { "version_value" : "3.15", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-720", "name" : "DSA-720", "refsource" : "DEBIAN", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smartlist:smartlist:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.15" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-03T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0158", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bidwatcher", "product" : { "product_data" : [ { "product_name" : "bidwatcher", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.9.1", "version_affected" : "=" }, { "version_value" : "1.1.9.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0_beta", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-687", "name" : "DSA-687", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-06.xml", "name" : "GLSA-200503-06", "refsource" : "GENTOO", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.0_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bidwatcher:bidwatcher:1.3.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0159", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "toolchain-source", "version" : { "version_data" : [ { "version_value" : "3.0.3-1", "version_affected" : "=" }, { "version_value" : "3.0.3-2", "version_affected" : "=" }, { "version_value" : "3.0.3-3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" } ] } }, { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14277", "name" : "14277", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-679", "name" : "DSA-679", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12540", "name" : "12540", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19317", "name" : "toolchain-source-symlink(19317)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:toolchain-source:3.0.3-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:toolchain-source:3.0.3-2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:toolchain-source:3.0.3-3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:toolchain-source:3.0.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0160", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "e-merge", "product" : { "product_data" : [ { "product_name" : "unace", "version" : { "version_data" : [ { "version_value" : "1.2b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html", "name" : "20050222 unace-1.2b multiple buffer overflows and directory traversal bugs", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14359", "name" : "14359", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/215006", "name" : "VU#215006", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html", "name" : "SUSE-SR:2005:016", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12630", "name" : "12630", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain \"Ready for next volume\" messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-02-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0161", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "e-merge", "product" : { "product_data" : [ { "product_name" : "unace", "version" : { "version_data" : [ { "version_value" : "1.2b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html", "name" : "20050222 unace-1.2b multiple buffer overflows and directory traversal bugs", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14359", "name" : "14359", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html", "name" : "SUSE-SR:2005:016", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12628", "name" : "12628", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0162", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openswan", "product" : { "product_data" : [ { "product_name" : "openswan", "version" : { "version_data" : [ { "version_value" : "1.0.9", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "xelerance", "product" : { "product_data" : [ { "product_name" : "openswan", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14038", "name" : "14038", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14062", "name" : "14062", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013014", "name" : "1013014", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities", "name" : "20050126 Openswan XAUTH/PAM Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.openswan.org/support/vuln/IDEF0785/", "name" : "http://www.openswan.org/support/vuln/IDEF0785/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13195", "name" : "13195", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html", "name" : "FEDORA-2005-082", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12377", "name" : "12377", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19078", "name" : "openswan-xauth-pam-bo(19078)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openswan:openswan:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.9" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xelerance:openswan:2.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-26T05:00Z", "lastModifiedDate" : "2019-07-29T13:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0165", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0166", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0167", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0168", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0169", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0170", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0171", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0172", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0173", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0.patch1", "version_affected" : "=" }, { "version_value" : "2.0.patch2", "version_affected" : "=" }, { "version_value" : "2.0.pre1", "version_affected" : "=" }, { "version_value" : "2.0.release", "version_affected" : "=" }, { "version_value" : "2.1.patch1", "version_affected" : "=" }, { "version_value" : "2.1.patch2", "version_affected" : "=" }, { "version_value" : "2.1.pre1", "version_affected" : "=" }, { "version_value" : "2.1.pre3", "version_affected" : "=" }, { "version_value" : "2.1.pre4", "version_affected" : "=" }, { "version_value" : "2.1.release", "version_affected" : "=" }, { "version_value" : "2.2.devel3", "version_affected" : "=" }, { "version_value" : "2.2.devel4", "version_affected" : "=" }, { "version_value" : "2.2.pre1", "version_affected" : "=" }, { "version_value" : "2.2.pre2", "version_affected" : "=" }, { "version_value" : "2.2.stable1", "version_affected" : "=" }, { "version_value" : "2.2.stable2", "version_affected" : "=" }, { "version_value" : "2.2.stable3", "version_affected" : "=" }, { "version_value" : "2.2.stable4", "version_affected" : "=" }, { "version_value" : "2.2.stable5", "version_affected" : "=" }, { "version_value" : "2.3.devel2", "version_affected" : "=" }, { "version_value" : "2.3.devel3", "version_affected" : "=" }, { "version_value" : "2.3.stable1", "version_affected" : "=" }, { "version_value" : "2.3.stable2", "version_affected" : "=" }, { "version_value" : "2.3.stable3", "version_affected" : "=" }, { "version_value" : "2.3.stable4", "version_affected" : "=" }, { "version_value" : "2.3.stable5", "version_affected" : "=" }, { "version_value" : "2.4.stable1", "version_affected" : "=" }, { "version_value" : "2.4.stable2", "version_affected" : "=" }, { "version_value" : "2.4.stable3", "version_affected" : "=" }, { "version_value" : "2.4.stable4", "version_affected" : "=" }, { "version_value" : "2.4.stable6", "version_affected" : "=" }, { "version_value" : "2.4.stable7", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923", "name" : "CLA-2005:923", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2", "name" : "20050207 [USN-77-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-667", "name" : "DSA-667", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/924198", "name" : "VU#924198", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034", "name" : "MDKSA-2005:034", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12431", "name" : "12431", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1187", "name" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1187", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10251", "name" : "oval:org.mitre.oval:def:10251", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0174", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931", "name" : "CLA-2005:931", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2", "name" : "20050207 [USN-77-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/768702", "name" : "VU#768702", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034", "name" : "MDKSA-2005:034", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html", "name" : "FEDORA-2005-373", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12412", "name" : "12412", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt", "name" : "http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656", "name" : "oval:org.mitre.oval:def:10656", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0175", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931", "name" : "CLA-2005:931", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2", "name" : "20050207 [USN-77-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-667", "name" : "DSA-667", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/625878", "name" : "VU#625878", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034", "name" : "MDKSA-2005:034", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html", "name" : "FEDORA-2005-373", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12433", "name" : "12433", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Advisories/SQUID-2005_5.txt", "name" : "http://www.squid-cache.org/Advisories/SQUID-2005_5.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11605", "name" : "oval:org.mitre.oval:def:11605", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0176", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U", "name" : "20060402-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2", "name" : "20050215 [USN-82-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/19607", "name" : "19607", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-472.html", "name" : "RHSA-2005:472", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225", "name" : "oval:org.mitre.oval:def:1225", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778", "name" : "oval:org.mitre.oval:def:8778", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-15T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0177", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2", "name" : "20050215 [USN-82-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10298", "name" : "oval:org.mitre.oval:def:10298", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0178", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netkit", "product" : { "product_data" : [ { "product_name" : "linux_netkit", "version" : { "version_data" : [ { "version_value" : "0.17", "version_affected" : "=" }, { "version_value" : "0.17.17", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "vserver", "product" : { "product_data" : [ { "product_name" : "linux-vserver", "version" : { "version_data" : [ { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.22", "version_affected" : "=" }, { "version_value" : "1.23", "version_affected" : "=" }, { "version_value" : "1.24", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.9.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.15_pre20", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@41ddda70CWJb5nNL71T4MOlG2sMG8A", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@41ddda70CWJb5nNL71T4MOlG2sMG8A", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846102231365&w=2", "name" : "20050215 [USN-82-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10647", "name" : "oval:org.mitre.oval:def:10647", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netkit:linux_netkit:0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netkit:linux_netkit:0.17.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0179", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html", "name" : "20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9890", "name" : "oval:org.mitre.oval:def:9890", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0180", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html", "name" : "20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17826", "name" : "17826", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218", "name" : "MDKSA-2005:218", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219", "name" : "MDKSA-2005:219", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/386374", "name" : "20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12198", "name" : "12198", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10667", "name" : "oval:org.mitre.oval:def:10667", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0182", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mod_dosevasive", "product" : { "product_data" : [ { "product_name" : "mod_dosevasive", "version" : { "version_data" : [ { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547469530582&w=2", "name" : "20050111 Mod_dosevasive symlink and race vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13725", "name" : "13725", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01", "name" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12181", "name" : "12181", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18765", "name" : "moddosevasive-symlink(18765)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mod_dosevasive:mod_dosevasive:1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mod_dosevasive:mod_dosevasive:1.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-06T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0183", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "vacation_plugin", "version" : { "version_data" : [ { "version_value" : "0.15", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2", "name" : "20050111 Squirrelmail vacation v0.15 local root exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13791", "name" : "13791", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03", "name" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012866", "name" : "1012866", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12222", "name" : "12222", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squirrelmail.org/plugin_view.php?id=51", "name" : "http://www.squirrelmail.org/plugin_view.php?id=51", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18855", "name" : "vacation-ftpfile-command-execution(18855)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:vacation_plugin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.15" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0184", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110549426300953&w=2", "name" : "20050111 Squirrelmail vacation v0.15 local root exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13791", "name" : "13791", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03", "name" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012866", "name" : "1012866", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12222", "name" : "12222", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squirrelmail.org/plugin_view.php?id=51", "name" : "http://www.squirrelmail.org/plugin_view.php?id=51", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18856", "name" : "vacation-ftpfile-directory-traversal(18856)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:squirrelmail:vacation_plugin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.15" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0185", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mnet_soft_factory", "product" : { "product_data" : [ { "product_name" : "nodemanager_professional", "version" : { "version_data" : [ { "version_value" : "2.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110599796118583&w=2", "name" : "20050117 [SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13881/", "name" : "13881", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012915", "name" : "1012915", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.security.org.sg/vuln/nodemanager200.html", "name" : "http://www.security.org.sg/vuln/nodemanager200.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12283", "name" : "12283", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18937", "name" : "nodemanager-linkdown-bo(18937)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mnet_soft_factory:nodemanager_professional:2.00:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0186", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios", "version" : { "version_data" : [ { "version_value" : "12.1yd", "version_affected" : "=" }, { "version_value" : "12.2t", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "12.3t", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13913", "name" : "13913", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012945", "name" : "1012945", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml", "name" : "20050119 Vulnerability in Cisco IOS Embedded Call Processing Solutions", "refsource" : "CISCO", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18956", "name" : "cisco-ios-sccp-dos(18956)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849", "name" : "oval:org.mitre.oval:def:4849", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-19T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0187", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "athoc", "product" : { "product_data" : [ { "product_name" : "athoc_toolbar", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2", "name" : "20041006 Patch available for high risk flaws in the AtHoc Toolbar", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2", "name" : "20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt", "name" : "http://www.ngssoftware.com/advisories/athoc-01full.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/11341", "name" : "11341", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17627", "name" : "athoc-toolbar-bo(17627)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:athoc:athoc_toolbar:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0188", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "athoc", "product" : { "product_data" : [ { "product_name" : "athoc_toolbar", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=109710974324742&w=2", "name" : "20041006 Patch available for high risk flaws in the AtHoc Toolbar", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616363415176&w=2", "name" : "20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ngssoftware.com/advisories/athoc-01full.txt", "name" : "http://www.ngssoftware.com/advisories/athoc-01full.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/11341", "name" : "11341", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17628", "name" : "athoc-toolbar-format-string(17628)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:athoc:athoc_toolbar:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-10-06T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0189", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0_6.0.12.690", "version_affected" : "=" }, { "version_value" : "10.0_beta", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1016_beta", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1040", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html", "name" : "20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)", "refsource" : "NTBUGTRAQ", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2", "name" : "20041006 Patch available for multiple high risk vulnerabilities in RealPlayer", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616636318261&w=2", "name" : "20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://service.real.com/help/faq/security/040928_player/EN/", "name" : "http://service.real.com/help/faq/security/040928_player/EN/", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/698390", "name" : "VU#698390", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12311", "name" : "12311", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-10-06T04:00Z", "lastModifiedDate" : "2017-11-16T18:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0190", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0_6.0.12.690", "version_affected" : "=" }, { "version_value" : "10.0_beta", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1016_beta", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1040", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2", "name" : "20041006 Patch available for multiple high risk vulnerabilities in RealPlayer", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616160228843&w=2", "name" : "20050119 RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/12672/", "name" : "12672", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://service.real.com/help/faq/security/040928_player/EN/", "name" : "http://service.real.com/help/faq/security/040928_player/EN/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ngssoftware.com/advisories/real-02full.txt", "name" : "http://www.ngssoftware.com/advisories/real-02full.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/11308", "name" : "11308", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17551", "name" : "realplayer-media-file-deletion(17551)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2004-09-29T04:00Z", "lastModifiedDate" : "2017-11-16T18:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0191", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0_6.0.12.690", "version_affected" : "=" }, { "version_value" : "10.0_beta", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1016_beta", "version_affected" : "=" }, { "version_value" : "10.5_6.0.12.1040", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2", "name" : "20041006 Patch available for multiple high risk vulnerabilities in RealPlayer", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2", "name" : "20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://service.real.com/help/faq/security/040928_player/EN/", "name" : "http://service.real.com/help/faq/security/040928_player/EN/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ngssoftware.com/advisories/real-03full.txt", "name" : "http://www.ngssoftware.com/advisories/real-03full.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18982", "name" : "realplayer-long-filename-offbyone-bo(18982)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-01-19T05:00Z", "lastModifiedDate" : "2017-11-16T18:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0192", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=109707741022291&w=2", "name" : "20041006 Patch available for multiple high risk vulnerabilities in RealPlayer", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616302008401&w=2", "name" : "20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://service.real.com/help/faq/security/040928_player/EN/", "name" : "http://service.real.com/help/faq/security/040928_player/EN/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ngssoftware.com/advisories/real-03full.txt", "name" : "http://www.ngssoftware.com/advisories/real-03full.txt", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18984", "name" : "realplayer-rjs-filenane-directory-traversal(18984)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2004-10-06T04:00Z", "lastModifiedDate" : "2017-12-12T17:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isync", "product" : { "product_data" : [ { "product_name" : "mrouter", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00001.html", "name" : "APPLE-SA-2005-04-19", "refsource" : "APPLE", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110642400018425&w=2", "name" : "20050122 Mac OS X 10.3 iSync Privilege Escalation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13965", "name" : "13965", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012974", "name" : "1012974", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12334", "name" : "12334", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19011", "name" : "isync-mrouter-bo(19011)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isync:mrouter:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-22T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0194", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0.patch1", "version_affected" : "=" }, { "version_value" : "2.0.patch2", "version_affected" : "=" }, { "version_value" : "2.0.pre1", "version_affected" : "=" }, { "version_value" : "2.0.release", "version_affected" : "=" }, { "version_value" : "2.1.patch1", "version_affected" : "=" }, { "version_value" : "2.1.patch2", "version_affected" : "=" }, { "version_value" : "2.1.pre1", "version_affected" : "=" }, { "version_value" : "2.1.pre3", "version_affected" : "=" }, { "version_value" : "2.1.pre4", "version_affected" : "=" }, { "version_value" : "2.1.release", "version_affected" : "=" }, { "version_value" : "2.2.devel3", "version_affected" : "=" }, { "version_value" : "2.2.devel4", "version_affected" : "=" }, { "version_value" : "2.2.pre1", "version_affected" : "=" }, { "version_value" : "2.2.pre2", "version_affected" : "=" }, { "version_value" : "2.2.stable1", "version_affected" : "=" }, { "version_value" : "2.2.stable2", "version_affected" : "=" }, { "version_value" : "2.2.stable3", "version_affected" : "=" }, { "version_value" : "2.2.stable4", "version_affected" : "=" }, { "version_value" : "2.2.stable5", "version_affected" : "=" }, { "version_value" : "2.3.devel2", "version_affected" : "=" }, { "version_value" : "2.3.devel3", "version_affected" : "=" }, { "version_value" : "2.3.stable1", "version_affected" : "=" }, { "version_value" : "2.3.stable2", "version_affected" : "=" }, { "version_value" : "2.3.stable3", "version_affected" : "=" }, { "version_value" : "2.3.stable4", "version_affected" : "=" }, { "version_value" : "2.3.stable5", "version_affected" : "=" }, { "version_value" : "2.4.stable1", "version_affected" : "=" }, { "version_value" : "2.4.stable2", "version_affected" : "=" }, { "version_value" : "2.4.stable3", "version_affected" : "=" }, { "version_value" : "2.4.stable4", "version_affected" : "=" }, { "version_value" : "2.4.stable6", "version_affected" : "=" }, { "version_value" : "2.4.stable7", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923", "name" : "CLA-2005:923", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2", "name" : "20050221 [USN-84-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-667", "name" : "DSA-667", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/260421", "name" : "VU#260421", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1166", "name" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1166", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0195", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios", "version" : { "version_data" : [ { "version_value" : "12.0s", "version_affected" : "=" }, { "version_value" : "12.0sx", "version_affected" : "=" }, { "version_value" : "12.0sz", "version_affected" : "=" }, { "version_value" : "12.2b", "version_affected" : "=" }, { "version_value" : "12.2bc", "version_affected" : "=" }, { "version_value" : "12.2bx", "version_affected" : "=" }, { "version_value" : "12.2bz", "version_affected" : "=" }, { "version_value" : "12.2cx", "version_affected" : "=" }, { "version_value" : "12.2cz", "version_affected" : "=" }, { "version_value" : "12.2ew", "version_affected" : "=" }, { "version_value" : "12.2ewa", "version_affected" : "=" }, { "version_value" : "12.2jk", "version_affected" : "=" }, { "version_value" : "12.2mc", "version_affected" : "=" }, { "version_value" : "12.2s", "version_affected" : "=" }, { "version_value" : "12.2se", "version_affected" : "=" }, { "version_value" : "12.2su", "version_affected" : "=" }, { "version_value" : "12.2sv", "version_affected" : "=" }, { "version_value" : "12.2sw", "version_affected" : "=" }, { "version_value" : "12.2sx", "version_affected" : "=" }, { "version_value" : "12.2sxa", "version_affected" : "=" }, { "version_value" : "12.2sxb", "version_affected" : "=" }, { "version_value" : "12.2sxd", "version_affected" : "=" }, { "version_value" : "12.2sy", "version_affected" : "=" }, { "version_value" : "12.2sz", "version_affected" : "=" }, { "version_value" : "12.2t", "version_affected" : "=" }, { "version_value" : "12.2yt", "version_affected" : "=" }, { "version_value" : "12.2yu", "version_affected" : "=" }, { "version_value" : "12.2yv", "version_affected" : "=" }, { "version_value" : "12.2yz", "version_affected" : "=" }, { "version_value" : "12.2zc", "version_affected" : "=" }, { "version_value" : "12.2zd", "version_affected" : "=" }, { "version_value" : "12.2ze", "version_affected" : "=" }, { "version_value" : "12.2zf", "version_affected" : "=" }, { "version_value" : "12.2zg", "version_affected" : "=" }, { "version_value" : "12.2zh", "version_affected" : "=" }, { "version_value" : "12.2zi", "version_affected" : "=" }, { "version_value" : "12.2zj", "version_affected" : "=" }, { "version_value" : "12.2zl", "version_affected" : "=" }, { "version_value" : "12.2zn", "version_affected" : "=" }, { "version_value" : "12.2zo", "version_affected" : "=" }, { "version_value" : "12.2zp", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "12.3b", "version_affected" : "=" }, { "version_value" : "12.3bc", "version_affected" : "=" }, { "version_value" : "12.3bw", "version_affected" : "=" }, { "version_value" : "12.3j", "version_affected" : "=" }, { "version_value" : "12.3ja", "version_affected" : "=" }, { "version_value" : "12.3t", "version_affected" : "=" }, { "version_value" : "12.3xa", "version_affected" : "=" }, { "version_value" : "12.3xb", "version_affected" : "=" }, { "version_value" : "12.3xc", "version_affected" : "=" }, { "version_value" : "12.3xd", "version_affected" : "=" }, { "version_value" : "12.3xe", "version_affected" : "=" }, { "version_value" : "12.3xf", "version_affected" : "=" }, { "version_value" : "12.3xg", "version_affected" : "=" }, { "version_value" : "12.3xh", "version_affected" : "=" }, { "version_value" : "12.3xi", "version_affected" : "=" }, { "version_value" : "12.3xk", "version_affected" : "=" }, { "version_value" : "12.3xl", "version_affected" : "=" }, { "version_value" : "12.3xm", "version_affected" : "=" }, { "version_value" : "12.3xn", "version_affected" : "=" }, { "version_value" : "12.3xq", "version_affected" : "=" }, { "version_value" : "12.3xr", "version_affected" : "=" }, { "version_value" : "12.3xs", "version_affected" : "=" }, { "version_value" : "12.3xt", "version_affected" : "=" }, { "version_value" : "12.3xu", "version_affected" : "=" }, { "version_value" : "12.3xw", "version_affected" : "=" }, { "version_value" : "12.3xx", "version_affected" : "=" }, { "version_value" : "12.3xy", "version_affected" : "=" }, { "version_value" : "12.3xz", "version_affected" : "=" }, { "version_value" : "12.3ya", "version_affected" : "=" }, { "version_value" : "12.3yd", "version_affected" : "=" }, { "version_value" : "12.3ye", "version_affected" : "=" }, { "version_value" : "12.3yf", "version_affected" : "=" }, { "version_value" : "12.3yg", "version_affected" : "=" }, { "version_value" : "12.3yh", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-ipv6.shtml", "name" : "20050126 Multiple Crafted IPv6 Packets Cause Reload", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/472582", "name" : "VU#472582", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html", "name" : "TA05-026A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19072", "name" : "cisco-ios-ipv6-dos(19072)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5813", "name" : "oval:org.mitre.oval:def:5813", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0196", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios", "version" : { "version_data" : [ { "version_value" : "12.0", "version_affected" : "=" }, { "version_value" : "12.0da", "version_affected" : "=" }, { "version_value" : "12.0db", "version_affected" : "=" }, { "version_value" : "12.0dc", "version_affected" : "=" }, { "version_value" : "12.0s", "version_affected" : "=" }, { "version_value" : "12.0sc", "version_affected" : "=" }, { "version_value" : "12.0sp", "version_affected" : "=" }, { "version_value" : "12.0st", "version_affected" : "=" }, { "version_value" : "12.0sx", "version_affected" : "=" }, { "version_value" : "12.0sy", "version_affected" : "=" }, { "version_value" : "12.0sz", "version_affected" : "=" }, { "version_value" : "12.0w5", "version_affected" : "=" }, { "version_value" : "12.0wc", "version_affected" : "=" }, { "version_value" : "12.0wt", "version_affected" : "=" }, { "version_value" : "12.0wx", "version_affected" : "=" }, { "version_value" : "12.0xa", "version_affected" : "=" }, { "version_value" : "12.0xb", "version_affected" : "=" }, { "version_value" : "12.0xc", "version_affected" : "=" }, { "version_value" : "12.0xd", "version_affected" : "=" }, { "version_value" : "12.0xe", "version_affected" : "=" }, { "version_value" : "12.0xf", "version_affected" : "=" }, { "version_value" : "12.0xg", "version_affected" : "=" }, { "version_value" : "12.0xh", "version_affected" : "=" }, { "version_value" : "12.0xi", "version_affected" : "=" }, { "version_value" : "12.0xj", "version_affected" : "=" }, { "version_value" : "12.0xk", "version_affected" : "=" }, { "version_value" : "12.0xl", "version_affected" : "=" }, { "version_value" : "12.0xm", "version_affected" : "=" }, { "version_value" : "12.0xn", "version_affected" : "=" }, { "version_value" : "12.0xp", "version_affected" : "=" }, { "version_value" : "12.0xq", "version_affected" : "=" }, { "version_value" : "12.0xr", "version_affected" : "=" }, { "version_value" : "12.0xs", "version_affected" : "=" }, { "version_value" : "12.0xt", "version_affected" : "=" }, { "version_value" : "12.0xu", "version_affected" : "=" }, { "version_value" : "12.0xv", "version_affected" : "=" }, { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.1aa", "version_affected" : "=" }, { "version_value" : "12.1ax", "version_affected" : "=" }, { "version_value" : "12.1ay", "version_affected" : "=" }, { "version_value" : "12.1az", "version_affected" : "=" }, { "version_value" : "12.1da", "version_affected" : "=" }, { "version_value" : "12.1db", "version_affected" : "=" }, { "version_value" : "12.1dc", "version_affected" : "=" }, { "version_value" : "12.1e", "version_affected" : "=" }, { "version_value" : "12.1ea", "version_affected" : "=" }, { "version_value" : "12.1ec", "version_affected" : "=" }, { "version_value" : "12.1eo", "version_affected" : "=" }, { "version_value" : "12.1ev", "version_affected" : "=" }, { "version_value" : "12.1ew", "version_affected" : "=" }, { "version_value" : "12.1ex", "version_affected" : "=" }, { "version_value" : "12.1ey", "version_affected" : "=" }, { "version_value" : "12.1t", "version_affected" : "=" }, { "version_value" : "12.1xa", "version_affected" : "=" }, { "version_value" : "12.1xb", "version_affected" : "=" }, { "version_value" : "12.1xc", "version_affected" : "=" }, { "version_value" : "12.1xd", "version_affected" : "=" }, { "version_value" : "12.1xe", "version_affected" : "=" }, { "version_value" : "12.1xf", "version_affected" : "=" }, { "version_value" : "12.1xg", "version_affected" : "=" }, { "version_value" : "12.1xh", "version_affected" : "=" }, { "version_value" : "12.1xi", "version_affected" : "=" }, { "version_value" : "12.1xj", "version_affected" : "=" }, { "version_value" : "12.1xl", "version_affected" : "=" }, { "version_value" : "12.1xm", "version_affected" : "=" }, { "version_value" : "12.1xp", "version_affected" : "=" }, { "version_value" : "12.1xq", "version_affected" : "=" }, { "version_value" : "12.1xr", "version_affected" : "=" }, { "version_value" : "12.1xt", "version_affected" : "=" }, { "version_value" : "12.1xu", "version_affected" : "=" }, { "version_value" : "12.1xv", "version_affected" : "=" }, { "version_value" : "12.1ya", "version_affected" : "=" }, { "version_value" : "12.1yb", "version_affected" : "=" }, { "version_value" : "12.1yf", "version_affected" : "=" }, { "version_value" : "12.1yh", "version_affected" : "=" }, { "version_value" : "12.1yi", "version_affected" : "=" }, { "version_value" : "12.1yj", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" }, { "version_value" : "12.2b", "version_affected" : "=" }, { "version_value" : "12.2bc", "version_affected" : "=" }, { "version_value" : "12.2bw", "version_affected" : "=" }, { "version_value" : "12.2bx", "version_affected" : "=" }, { "version_value" : "12.2by", "version_affected" : "=" }, { "version_value" : "12.2bz", "version_affected" : "=" }, { "version_value" : "12.2cz", "version_affected" : "=" }, { "version_value" : "12.2da", "version_affected" : "=" }, { "version_value" : "12.2dd", "version_affected" : "=" }, { "version_value" : "12.2dx", "version_affected" : "=" }, { "version_value" : "12.2ew", "version_affected" : "=" }, { "version_value" : "12.2jk", "version_affected" : "=" }, { "version_value" : "12.2mb", "version_affected" : "=" }, { "version_value" : "12.2mc", "version_affected" : "=" }, { "version_value" : "12.2mx", "version_affected" : "=" }, { "version_value" : "12.2s", "version_affected" : "=" }, { "version_value" : "12.2se", "version_affected" : "=" }, { "version_value" : "12.2su", "version_affected" : "=" }, { "version_value" : "12.2sw", "version_affected" : "=" }, { "version_value" : "12.2sx", "version_affected" : "=" }, { "version_value" : "12.2sxa", "version_affected" : "=" }, { "version_value" : "12.2sxb", "version_affected" : "=" }, { "version_value" : "12.2sxd", "version_affected" : "=" }, { "version_value" : "12.2sy", "version_affected" : "=" }, { "version_value" : "12.2sz", "version_affected" : "=" }, { "version_value" : "12.2t", "version_affected" : "=" }, { "version_value" : "12.2x", "version_affected" : "=" }, { "version_value" : "12.2xa", "version_affected" : "=" }, { "version_value" : "12.2xb", "version_affected" : "=" }, { "version_value" : "12.2xc", "version_affected" : "=" }, { "version_value" : "12.2xd", "version_affected" : "=" }, { "version_value" : "12.2xe", "version_affected" : "=" }, { "version_value" : "12.2xf", "version_affected" : "=" }, { "version_value" : "12.2xg", "version_affected" : "=" }, { "version_value" : "12.2xh", "version_affected" : "=" }, { "version_value" : "12.2xi", "version_affected" : "=" }, { "version_value" : "12.2xj", "version_affected" : "=" }, { "version_value" : "12.2xk", "version_affected" : "=" }, { "version_value" : "12.2xl", "version_affected" : "=" }, { "version_value" : "12.2xm", "version_affected" : "=" }, { "version_value" : "12.2xn", "version_affected" : "=" }, { "version_value" : "12.2xq", "version_affected" : "=" }, { "version_value" : "12.2xs", "version_affected" : "=" }, { "version_value" : "12.2xt", "version_affected" : "=" }, { "version_value" : "12.2xu", "version_affected" : "=" }, { "version_value" : "12.2xw", "version_affected" : "=" }, { "version_value" : "12.2xz", "version_affected" : "=" }, { "version_value" : "12.2ya", "version_affected" : "=" }, { "version_value" : "12.2yb", "version_affected" : "=" }, { "version_value" : "12.2yc", "version_affected" : "=" }, { "version_value" : "12.2ye", "version_affected" : "=" }, { "version_value" : "12.2yf", "version_affected" : "=" }, { "version_value" : "12.2yg", "version_affected" : "=" }, { "version_value" : "12.2yh", "version_affected" : "=" }, { "version_value" : "12.2yj", "version_affected" : "=" }, { "version_value" : "12.2yk", "version_affected" : "=" }, { "version_value" : "12.2yl", "version_affected" : "=" }, { "version_value" : "12.2ym", "version_affected" : "=" }, { "version_value" : "12.2yn", "version_affected" : "=" }, { "version_value" : "12.2yo", "version_affected" : "=" }, { "version_value" : "12.2yp", "version_affected" : "=" }, { "version_value" : "12.2yq", "version_affected" : "=" }, { "version_value" : "12.2yr", "version_affected" : "=" }, { "version_value" : "12.2ys", "version_affected" : "=" }, { "version_value" : "12.2yt", "version_affected" : "=" }, { "version_value" : "12.2yu", "version_affected" : "=" }, { "version_value" : "12.2yv", "version_affected" : "=" }, { "version_value" : "12.2yw", "version_affected" : "=" }, { "version_value" : "12.2yx", "version_affected" : "=" }, { "version_value" : "12.2yy", "version_affected" : "=" }, { "version_value" : "12.2yz", "version_affected" : "=" }, { "version_value" : "12.2za", "version_affected" : "=" }, { "version_value" : "12.2zb", "version_affected" : "=" }, { "version_value" : "12.2zc", "version_affected" : "=" }, { "version_value" : "12.2zd", "version_affected" : "=" }, { "version_value" : "12.2ze", "version_affected" : "=" }, { "version_value" : "12.2zf", "version_affected" : "=" }, { "version_value" : "12.2zg", "version_affected" : "=" }, { "version_value" : "12.2zh", "version_affected" : "=" }, { "version_value" : "12.2zi", "version_affected" : "=" }, { "version_value" : "12.2zj", "version_affected" : "=" }, { "version_value" : "12.2zk", "version_affected" : "=" }, { "version_value" : "12.2zl", "version_affected" : "=" }, { "version_value" : "12.2zm", "version_affected" : "=" }, { "version_value" : "12.2zn", "version_affected" : "=" }, { "version_value" : "12.2zo", "version_affected" : "=" }, { "version_value" : "12.2zp", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "12.3b", "version_affected" : "=" }, { "version_value" : "12.3bw", "version_affected" : "=" }, { "version_value" : "12.3t", "version_affected" : "=" }, { "version_value" : "12.3xa", "version_affected" : "=" }, { "version_value" : "12.3xb", "version_affected" : "=" }, { "version_value" : "12.3xc", "version_affected" : "=" }, { "version_value" : "12.3xd", "version_affected" : "=" }, { "version_value" : "12.3xe", "version_affected" : "=" }, { "version_value" : "12.3xf", "version_affected" : "=" }, { "version_value" : "12.3xg", "version_affected" : "=" }, { "version_value" : "12.3xh", "version_affected" : "=" }, { "version_value" : "12.3xi", "version_affected" : "=" }, { "version_value" : "12.3xj", "version_affected" : "=" }, { "version_value" : "12.3xk", "version_affected" : "=" }, { "version_value" : "12.3xl", "version_affected" : "=" }, { "version_value" : "12.3xn", "version_affected" : "=" }, { "version_value" : "12.3xq", "version_affected" : "=" }, { "version_value" : "12.3xr", "version_affected" : "=" }, { "version_value" : "12.3xs", "version_affected" : "=" }, { "version_value" : "12.3xu", "version_affected" : "=" }, { "version_value" : "12.3xv", "version_affected" : "=" }, { "version_value" : "12.3xx", "version_affected" : "=" }, { "version_value" : "12.3ya", "version_affected" : "=" }, { "version_value" : "12.3yc", "version_affected" : "=" }, { "version_value" : "12.3yd", "version_affected" : "=" }, { "version_value" : "12.3ye", "version_affected" : "=" }, { "version_value" : "12.3yf", "version_affected" : "=" }, { "version_value" : "12.3yh", "version_affected" : "=" }, { "version_value" : "12.3yj", "version_affected" : "=" }, { "version_value" : "12.3yl", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14034", "name" : "14034", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013013", "name" : "1013013", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml", "name" : "20050126 Cisco IOS Misformed BGP Packet Causes Reload", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/689326", "name" : "VU#689326", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html", "name" : "TA05-026A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19074", "name" : "cisco-ios-bgp-packetdos(19074)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5652", "name" : "oval:org.mitre.oval:def:5652", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2x:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2xz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0197", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios", "version" : { "version_data" : [ { "version_value" : "12.1t", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" }, { "version_value" : "12.2t", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "12.3t", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14031", "name" : "14031", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013015", "name" : "1013015", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtml", "name" : "20050126 Crafted Packet Causes Reload on Cisco Routers", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/583638", "name" : "VU#583638", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12369", "name" : "12369", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-026A.html", "name" : "TA05-026A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19071", "name" : "cisco-ios-mpls-dos(19071)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662", "name" : "oval:org.mitre.oval:def:5662", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.5, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0198", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "university_of_washington", "product" : { "product_data" : [ { "product_name" : "uw-imap", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14057", "name" : "14057", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14097", "name" : "14097", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013037", "name" : "1013037", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml", "name" : "GLSA-200502-02", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/702777", "name" : "VU#702777", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/CRDY-68QSL5", "name" : "http://www.kb.cert.org/vuls/id/CRDY-68QSL5", "refsource" : "CONFIRM", "tags" : [ "Patch", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:026", "name" : "MDKSA-2005:026", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-128.html", "name" : "RHSA-2005:128", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12391", "name" : "12391", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306", "name" : "oval:org.mitre.oval:def:11306", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0199", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ngircd", "product" : { "product_data" : [ { "product_name" : "ngircd", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.5", "version_affected" : "=" }, { "version_value" : "0.7.6", "version_affected" : "=" }, { "version_value" : "0.7.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html", "name" : "[ngIRCd-ML] 20050126 ngIRCd 0.8.2", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79705", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=79705", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14056", "name" : "14056", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14059", "name" : "14059", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013047", "name" : "1013047", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml", "name" : "GLSA-200501-40", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12397", "name" : "12397", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19143", "name" : "ngircd-listmakemask-bo(19143)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0200", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tiki", "product" : { "product_data" : [ { "product_name" : "tikiwiki_cms/groupware", "version" : { "version_data" : [ { "version_value" : "1.6.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13948", "name" : "13948", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://tikiwiki.org/art102", "name" : "http://tikiwiki.org/art102", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml", "name" : "GLSA-200501-41", "refsource" : "GENTOO", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.6.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2012-10-24T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0201", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "d-bus", "product" : { "product_data" : [ { "product_name" : "d-bus", "version" : { "version_data" : [ { "version_value" : "0.22", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14119", "name" : "14119", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15638", "name" : "15638", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15833", "name" : "15833", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15844", "name" : "15844", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013075", "name" : "1013075", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.auscert.org.au/render.html?it=5156", "name" : "ESB-2005.0435", "refsource" : "AUSCERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:105", "name" : "MDKSA-2005:105", "refsource" : "MANDRAKE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-102.html", "name" : "RHSA-2005:102", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12435", "name" : "12435", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10973", "name" : "oval:org.mitre.oval:def:10973", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/144-1/", "name" : "USN-144-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:d-bus:d-bus:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.22" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-29T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0202", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "mailman", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1b1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Patch" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031562.html", "name" : "20050209 Administrivia: List Compromised due to Mailman Vulnerability", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110805795122386&w=2", "name" : "20050209 [USN-78-1] Mailman vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14211", "name" : "14211", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013145", "name" : "1013145", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-674", "name" : "DSA-674", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-11.xml", "name" : "GLSA-200502-11", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:037", "name" : "MDKSA-2005:037", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_07_mailman.html", "name" : "SUSE-SA:2005:007", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-136.html", "name" : "RHSA-2005:136", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-137.html", "name" : "RHSA-2005:137", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10657", "name" : "oval:org.mitre.oval:def:10657", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via \".../....///\" sequences, which are not properly cleansed by regular expressions that are intended to remove \"../\" and \"./\" sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0203", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-06-09T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0204", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/18784", "name" : "18784", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-092.html", "name" : "RHSA-2005:092", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2006/0006", "name" : "2006-0006", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10320", "name" : "oval:org.mitre.oval:def:10320", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0205", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bernd_wuebben", "product" : { "product_data" : [ { "product_name" : "kppp", "version" : { "version_data" : [ { "version_value" : "2.1.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934", "name" : "CLA-2005:934", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2005/dsa-692", "name" : "DSA-692", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=208&type=vulnerabilities", "name" : "20050228 KPPP Privileged File Descriptor Leak Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kde.org/info/security/advisory-20050228-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050228-1.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-175.html", "name" : "RHSA-2005:175", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596", "name" : "oval:org.mitre.oval:def:9596", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:bernd_wuebben:kppp:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0206", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ascii", "product" : { "product_data" : [ { "product_name" : "ptex", "version" : { "version_data" : [ { "version_value" : "3.1.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "cstex", "product" : { "product_data" : [ { "product_name" : "cstetex", "version" : { "version_data" : [ { "version_value" : "2.0.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "easy_software_products", "product" : { "product_data" : [ { "product_name" : "cups", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.4_8", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.4_2", "version_affected" : "=" }, { "version_value" : "1.1.4_3", "version_affected" : "=" }, { "version_value" : "1.1.4_5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "1.1.19_rc5", "version_affected" : "=" }, { "version_value" : "1.1.20", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "gpdf", "version" : { "version_data" : [ { "version_value" : "0.110", "version_affected" : "=" }, { "version_value" : "0.112", "version_affected" : "=" }, { "version_value" : "0.131", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "koffice", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3_beta1", "version_affected" : "=" }, { "version_value" : "1.3_beta2", "version_affected" : "=" }, { "version_value" : "1.3_beta3", "version_affected" : "=" } ] } }, { "product_name" : "kpdf", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" } ] } }, { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "pdftohtml", "product" : { "product_data" : [ { "product_name" : "pdftohtml", "version" : { "version_data" : [ { "version_value" : "0.32a", "version_affected" : "=" }, { "version_value" : "0.32b", "version_affected" : "=" }, { "version_value" : "0.33", "version_affected" : "=" }, { "version_value" : "0.33a", "version_affected" : "=" }, { "version_value" : "0.34", "version_affected" : "=" }, { "version_value" : "0.35", "version_affected" : "=" }, { "version_value" : "0.36", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "advanced_linux_environment", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "tetex", "product" : { "product_data" : [ { "product_name" : "tetex", "version" : { "version_data" : [ { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "xpdf", "product" : { "product_data" : [ { "product_name" : "xpdf", "version" : { "version_data" : [ { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.91", "version_affected" : "=" }, { "version_value" : "0.92", "version_affected" : "=" }, { "version_value" : "0.93", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0a", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_1.0", "version_affected" : "=" }, { "version_value" : "core_2.0", "version_affected" : "=" }, { "version_value" : "core_3.0", "version_affected" : "=" } ] } }, { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "linux_advanced_workstation", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:041", "name" : "MDKSA-2005:041", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:042", "name" : "MDKSA-2005:042", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:043", "name" : "MDKSA-2005:043", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:044", "name" : "MDKSA-2005:044", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:052", "name" : "MDKSA-2005:052", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:056", "name" : "MDKSA-2005:056", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-034.html", "name" : "RHSA-2005:034", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-053.html", "name" : "RHSA-2005:053", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-057.html", "name" : "RHSA-2005:057", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-132.html", "name" : "RHSA-2005:132", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-213.html", "name" : "RHSA-2005:213", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/11501", "name" : "11501", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17818", "name" : "xpdf-pdf-bo(17818)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107", "name" : "oval:org.mitre.oval:def:11107", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ascii:ptex:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cstex:cstetex:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:easy_software_products:cups:1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gpdf:0.110:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gpdf:0.112:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gpdf:0.131:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3_beta2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:koffice:1.3_beta3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.32a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.32b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.33a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pdftohtml:pdftohtml:0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tetex:tetex:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:advanced_linux_environment:3.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0207", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/advisories/7880", "name" : "SUSE-SA:2005:003", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12330", "name" : "12330", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11001", "name" : "oval:org.mitre.oval:def:11001", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0208", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933", "name" : "CLA-2005:933", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://gaim.sourceforge.net/security/?id=12", "name" : "http://gaim.sourceforge.net/security/?id=12", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2", "name" : "20050225 [USN-85-1] Gaim vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14386", "name" : "14386", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml", "name" : "GLSA-200503-03", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/795812", "name" : "VU#795812", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049", "name" : "MDKSA-2005:049", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html", "name" : "RHSA-2005:215", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12660", "name" : "12660", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10477", "name" : "oval:org.mitre.oval:def:10477", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes \"an invalid memory access,\" a different vulnerability than CVE-2005-0473." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0209", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945", "name" : "CLA-2005:945", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html", "name" : "RHSA-2005:420", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855", "name" : "oval:org.mitre.oval:def:11855", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0210", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945", "name" : "CLA-2005:945", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14295", "name" : "14295", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17826", "name" : "17826", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218", "name" : "MDKSA-2005:218", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219", "name" : "MDKSA-2005:219", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14966", "name" : "14966", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12816", "name" : "12816", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10275", "name" : "oval:org.mitre.oval:def:10275", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0211", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ "Broken Link" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110780531820947&w=2", "name" : "20050207 [USN-77-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/14076", "name" : "14076", "refsource" : "SECUNIA", "tags" : [ "Permissions Required" ] }, { "url" : "http://securitytracker.com/id?1013045", "name" : "1013045", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.debian.org/security/2005/dsa-667", "name" : "DSA-667", "refsource" : "DEBIAN", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/886006", "name" : "VU#886006", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:034", "name" : "MDKSA-2005:034", "refsource" : "MANDRAKE", "tags" : [ "Broken Link" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Broken Link" ] }, { "url" : "http://www.osvdb.org/13319", "name" : "13319", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Not Applicable", "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Not Applicable", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12432", "name" : "12432", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573", "name" : "oval:org.mitre.oval:def:9573", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5.stable6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T18:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0212", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "amp", "product" : { "product_data" : [ { "product_name" : "amp_ii_3d_game_engine", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/amp2zero-adv.txt", "name" : "http://aluigi.altervista.org/adv/amp2zero-adv.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110503597505648&w=2", "name" : "20050106 Socket unreacheable in Amp II engine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13754", "name" : "13754", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12192", "name" : "12192", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18789", "name" : "amp-3d-socket-dos(18789)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:amp:amp_ii_3d_game_engine:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0213", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webtoolmaster_software", "product" : { "product_data" : [ { "product_name" : "winhki", "version" : { "version_data" : [ { "version_value" : "1.4d", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110505334903257&w=2", "name" : "20050106 WinAc AND WinHKI ZIP File Directory Transversal", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13738", "name" : "13738", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012798", "name" : "1012798", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12176", "name" : "12176", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18798", "name" : "winhki-zip-directory-traversal(18798)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a zip file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webtoolmaster_software:winhki:1.4d:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0214", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alexander_palmo", "product" : { "product_data" : [ { "product_name" : "simple_php_blog", "version" : { "version_data" : [ { "version_value" : "0.3.7c", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0210.html", "name" : "20050107 Simple PHP Blog directory traversal vulnerability", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110512850603989&w=2", "name" : "20050107 Simple PHP Blog directory traversal vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12193", "name" : "12193", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18802", "name" : "sphp-dotdot-directory-traversal(18802)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.3.7c:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0215", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110512665029209&w=2", "name" : "20050107 Mozilla XBM Image Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18803", "name" : "mozilla-xbm-dos(18803)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0216", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110537385427004&w=2", "name" : "20050108 Security Advisory: Woltlab Burning Board Lite formmail.php XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13782", "name" : "13782", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12199", "name" : "12199", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18814", "name" : "wbb-formmail-userid-xss(18814)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board_lite:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board_lite:1.0.1e:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0217", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "invision_power_services", "product" : { "product_data" : [ { "product_name" : "invision_community_blog", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110538277223800&w=2", "name" : "20050109 SQL Injection Vulnerability in Invision Community Blog", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13783", "name" : "13783", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012831", "name" : "1012831", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12817", "name" : "12817", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12205", "name" : "12205", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18815", "name" : "icb-sql-injection(18815)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0218", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "clam_anti-virus", "product" : { "product_data" : [ { "product_name" : "clamav", "version" : { "version_data" : [ { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.52", "version_affected" : "=" }, { "version_value" : "0.53", "version_affected" : "=" }, { "version_value" : "0.54", "version_affected" : "=" }, { "version_value" : "0.60", "version_affected" : "=" }, { "version_value" : "0.65", "version_affected" : "=" }, { "version_value" : "0.67", "version_affected" : "=" }, { "version_value" : "0.68", "version_affected" : "=" }, { "version_value" : "0.68.1", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html", "name" : "20050110 Multi-vendor AV gateway image inspection bypass vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html", "name" : "20050114 Re: Multi-vendor AV gateway image inspection bypass vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13900/", "name" : "13900", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=300116", "name" : "http://sourceforge.net/project/shownotes.php?release_id=300116", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml", "name" : "GLSA-200501-46", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:025", "name" : "MDKSA-2005:025", "refsource" : "MANDRAKE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0219", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gallery_project", "product" : { "product_data" : [ { "product_name" : "gallery", "version" : { "version_data" : [ { "version_value" : "1.3.4_pl1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "VULNWATCH", "tags" : [ ] }, { "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "name" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "name" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938", "name" : "gallery-multiple-xss(18938)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43473", "name" : "gallery-multiple-scripts-xss(43473)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gallery_project:gallery:1.3.4_pl1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0220", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gallery_project", "product" : { "product_data" : [ { "product_name" : "gallery", "version" : { "version_data" : [ { "version_value" : "1.4.4_pl2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "VULNWATCH", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "name" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13887/", "name" : "13887", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "name" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml", "name" : "GLSA-200501-45", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938", "name" : "gallery-multiple-xss(18938)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0221", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gallery_project", "product" : { "product_data" : [ { "product_name" : "gallery", "version" : { "version_data" : [ { "version_value" : "2.0_alpha", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html", "name" : "20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "VULNWATCH", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "name" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "name" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18938", "name" : "gallery-multiple-xss(18938)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43472", "name" : "gallery-g2formsubject-xss(43472)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0222", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gallery_project", "product" : { "product_data" : [ { "product_name" : "gallery", "version" : { "version_data" : [ { "version_value" : "2.0_alpha", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html", "name" : "20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "VULNWATCH", "tags" : [ ] }, { "url" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "name" : "http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110608459222364&w=2", "name" : "20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "name" : "http://theinsider.deep-ice.com/texts/advisory69.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18940", "name" : "gallery-mainphp-obtain-information(18940)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0223", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "rte", "version" : { "version_data" : [ { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "compaq", "product" : { "product_data" : [ { "product_name" : "tru64", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110719624029320&w=2", "name" : "SSRT4875", "refsource" : "HP", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:rte:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:rte:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:compaq:tru64:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0224", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "virtualvault", "version" : { "version_data" : [ { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110726808700080&w=2", "name" : "SSRT5900", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14082/", "name" : "14082", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:virtualvault:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:virtualvault:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:virtualvault:4.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-31T05:00Z", "lastModifiedDate" : "2016-10-18T03:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0225", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "firehol", "product" : { "product_data" : [ { "product_name" : "firehol", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.9", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" }, { "version_value" : "1.11", "version_affected" : "=" }, { "version_value" : "1.12", "version_affected" : "=" }, { "version_value" : "1.13", "version_affected" : "=" }, { "version_value" : "1.14", "version_affected" : "=" }, { "version_value" : "1.15", "version_affected" : "=" }, { "version_value" : "1.16", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" }, { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.22", "version_affected" : "=" }, { "version_value" : "1.23", "version_affected" : "=" }, { "version_value" : "1.24", "version_affected" : "=" }, { "version_value" : "1.25", "version_affected" : "=" }, { "version_value" : "1.26", "version_affected" : "=" }, { "version_value" : "1.27", "version_affected" : "=" }, { "version_value" : "1.28", "version_affected" : "=" }, { "version_value" : "1.29", "version_affected" : "=" }, { "version_value" : "1.30", "version_affected" : "=" }, { "version_value" : "1.31", "version_affected" : "=" }, { "version_value" : "1.32", "version_affected" : "=" }, { "version_value" : "1.33", "version_affected" : "=" }, { "version_value" : "1.34", "version_affected" : "=" }, { "version_value" : "1.35", "version_affected" : "=" }, { "version_value" : "1.36", "version_affected" : "=" }, { "version_value" : "1.37", "version_affected" : "=" }, { "version_value" : "1.38", "version_affected" : "=" }, { "version_value" : "1.39", "version_affected" : "=" }, { "version_value" : "1.40", "version_affected" : "=" }, { "version_value" : "1.41", "version_affected" : "=" }, { "version_value" : "1.42", "version_affected" : "=" }, { "version_value" : "1.43", "version_affected" : "=" }, { "version_value" : "1.44", "version_affected" : "=" }, { "version_value" : "1.45", "version_affected" : "=" }, { "version_value" : "1.46", "version_affected" : "=" }, { "version_value" : "1.47", "version_affected" : "=" }, { "version_value" : "1.48", "version_affected" : "=" }, { "version_value" : "1.49", "version_affected" : "=" }, { "version_value" : "1.50", "version_affected" : "=" }, { "version_value" : "1.51", "version_affected" : "=" }, { "version_value" : "1.52", "version_affected" : "=" }, { "version_value" : "1.53", "version_affected" : "=" }, { "version_value" : "1.54", "version_affected" : "=" }, { "version_value" : "1.55", "version_affected" : "=" }, { "version_value" : "1.56", "version_affected" : "=" }, { "version_value" : "1.57", "version_affected" : "=" }, { "version_value" : "1.58", "version_affected" : "=" }, { "version_value" : "1.59", "version_affected" : "=" }, { "version_value" : "1.60", "version_affected" : "=" }, { "version_value" : "1.61", "version_affected" : "=" }, { "version_value" : "1.62", "version_affected" : "=" }, { "version_value" : "1.63", "version_affected" : "=" }, { "version_value" : "1.64", "version_affected" : "=" }, { "version_value" : "1.65", "version_affected" : "=" }, { "version_value" : "1.66", "version_affected" : "=" }, { "version_value" : "1.67", "version_affected" : "=" }, { "version_value" : "1.68", "version_affected" : "=" }, { "version_value" : "1.69", "version_affected" : "=" }, { "version_value" : "1.70", "version_affected" : "=" }, { "version_value" : "1.71", "version_affected" : "=" }, { "version_value" : "1.72", "version_affected" : "=" }, { "version_value" : "1.73", "version_affected" : "=" }, { "version_value" : "1.74", "version_affected" : "=" }, { "version_value" : "1.75", "version_affected" : "=" }, { "version_value" : "1.76", "version_affected" : "=" }, { "version_value" : "1.77", "version_affected" : "=" }, { "version_value" : "1.78", "version_affected" : "=" }, { "version_value" : "1.79", "version_affected" : "=" }, { "version_value" : "1.80", "version_affected" : "=" }, { "version_value" : "1.81", "version_affected" : "=" }, { "version_value" : "1.82", "version_affected" : "=" }, { "version_value" : "1.83", "version_affected" : "=" }, { "version_value" : "1.84", "version_affected" : "=" }, { "version_value" : "1.85", "version_affected" : "=" }, { "version_value" : "1.86", "version_affected" : "=" }, { "version_value" : "1.87", "version_affected" : "=" }, { "version_value" : "1.88", "version_affected" : "=" }, { "version_value" : "1.89", "version_affected" : "=" }, { "version_value" : "1.90", "version_affected" : "=" }, { "version_value" : "1.91", "version_affected" : "=" }, { "version_value" : "1.92", "version_affected" : "=" }, { "version_value" : "1.93", "version_affected" : "=" }, { "version_value" : "1.94", "version_affected" : "=" }, { "version_value" : "1.95", "version_affected" : "=" }, { "version_value" : "1.96", "version_affected" : "=" }, { "version_value" : "1.97", "version_affected" : "=" }, { "version_value" : "1.98", "version_affected" : "=" }, { "version_value" : "1.99", "version_affected" : "=" }, { "version_value" : "1.100", "version_affected" : "=" }, { "version_value" : "1.101", "version_affected" : "=" }, { "version_value" : "1.102", "version_affected" : "=" }, { "version_value" : "1.103", "version_affected" : "=" }, { "version_value" : "1.104", "version_affected" : "=" }, { "version_value" : "1.105", "version_affected" : "=" }, { "version_value" : "1.106", "version_affected" : "=" }, { "version_value" : "1.107", "version_affected" : "=" }, { "version_value" : "1.108", "version_affected" : "=" }, { "version_value" : "1.109", "version_affected" : "=" }, { "version_value" : "1.110", "version_affected" : "=" }, { "version_value" : "1.111", "version_affected" : "=" }, { "version_value" : "1.112", "version_affected" : "=" }, { "version_value" : "1.113", "version_affected" : "=" }, { "version_value" : "1.114", "version_affected" : "=" }, { "version_value" : "1.115", "version_affected" : "=" }, { "version_value" : "1.116", "version_affected" : "=" }, { "version_value" : "1.117", "version_affected" : "=" }, { "version_value" : "1.118", "version_affected" : "=" }, { "version_value" : "1.119", "version_affected" : "=" }, { "version_value" : "1.120", "version_affected" : "=" }, { "version_value" : "1.121", "version_affected" : "=" }, { "version_value" : "1.122", "version_affected" : "=" }, { "version_value" : "1.123", "version_affected" : "=" }, { "version_value" : "1.124", "version_affected" : "=" }, { "version_value" : "1.125", "version_affected" : "=" }, { "version_value" : "1.126", "version_affected" : "=" }, { "version_value" : "1.127", "version_affected" : "=" }, { "version_value" : "1.128", "version_affected" : "=" }, { "version_value" : "1.129", "version_affected" : "=" }, { "version_value" : "1.130", "version_affected" : "=" }, { "version_value" : "1.131", "version_affected" : "=" }, { "version_value" : "1.132", "version_affected" : "=" }, { "version_value" : "1.133", "version_affected" : "=" }, { "version_value" : "1.134", "version_affected" : "=" }, { "version_value" : "1.135", "version_affected" : "=" }, { "version_value" : "1.136", "version_affected" : "=" }, { "version_value" : "1.137", "version_affected" : "=" }, { "version_value" : "1.138", "version_affected" : "=" }, { "version_value" : "1.139", "version_affected" : "=" }, { "version_value" : "1.140", "version_affected" : "=" }, { "version_value" : "1.141", "version_affected" : "=" }, { "version_value" : "1.142", "version_affected" : "=" }, { "version_value" : "1.143", "version_affected" : "=" }, { "version_value" : "1.144", "version_affected" : "=" }, { "version_value" : "1.145", "version_affected" : "=" }, { "version_value" : "1.146", "version_affected" : "=" }, { "version_value" : "1.147", "version_affected" : "=" }, { "version_value" : "1.148", "version_affected" : "=" }, { "version_value" : "1.149", "version_affected" : "=" }, { "version_value" : "1.150", "version_affected" : "=" }, { "version_value" : "1.151", "version_affected" : "=" }, { "version_value" : "1.152", "version_affected" : "=" }, { "version_value" : "1.153", "version_affected" : "=" }, { "version_value" : "1.154", "version_affected" : "=" }, { "version_value" : "1.155", "version_affected" : "=" }, { "version_value" : "1.156", "version_affected" : "=" }, { "version_value" : "1.157", "version_affected" : "=" }, { "version_value" : "1.158", "version_affected" : "=" }, { "version_value" : "1.159", "version_affected" : "=" }, { "version_value" : "1.160", "version_affected" : "=" }, { "version_value" : "1.161", "version_affected" : "=" }, { "version_value" : "1.162", "version_affected" : "=" }, { "version_value" : "1.163", "version_affected" : "=" }, { "version_value" : "1.164", "version_affected" : "=" }, { "version_value" : "1.165", "version_affected" : "=" }, { "version_value" : "1.166", "version_affected" : "=" }, { "version_value" : "1.167", "version_affected" : "=" }, { "version_value" : "1.168", "version_affected" : "=" }, { "version_value" : "1.169", "version_affected" : "=" }, { "version_value" : "1.170", "version_affected" : "=" }, { "version_value" : "1.171", "version_affected" : "=" }, { "version_value" : "1.172", "version_affected" : "=" }, { "version_value" : "1.173", "version_affected" : "=" }, { "version_value" : "1.174", "version_affected" : "=" }, { "version_value" : "1.175", "version_affected" : "=" }, { "version_value" : "1.176", "version_affected" : "=" }, { "version_value" : "1.177", "version_affected" : "=" }, { "version_value" : "1.178", "version_affected" : "=" }, { "version_value" : "1.179", "version_affected" : "=" }, { "version_value" : "1.180", "version_affected" : "=" }, { "version_value" : "1.181", "version_affected" : "=" }, { "version_value" : "1.182", "version_affected" : "=" }, { "version_value" : "1.183", "version_affected" : "=" }, { "version_value" : "1.184", "version_affected" : "=" }, { "version_value" : "1.185", "version_affected" : "=" }, { "version_value" : "1.186", "version_affected" : "=" }, { "version_value" : "1.187", "version_affected" : "=" }, { "version_value" : "1.188", "version_affected" : "=" }, { "version_value" : "1.189", "version_affected" : "=" }, { "version_value" : "1.190", "version_affected" : "=" }, { "version_value" : "1.191", "version_affected" : "=" }, { "version_value" : "1.192", "version_affected" : "=" }, { "version_value" : "1.193", "version_affected" : "=" }, { "version_value" : "1.194", "version_affected" : "=" }, { "version_value" : "1.195", "version_affected" : "=" }, { "version_value" : "1.196", "version_affected" : "=" }, { "version_value" : "1.197", "version_affected" : "=" }, { "version_value" : "1.198", "version_affected" : "=" }, { "version_value" : "1.199", "version_affected" : "=" }, { "version_value" : "1.200", "version_affected" : "=" }, { "version_value" : "1.201", "version_affected" : "=" }, { "version_value" : "1.202", "version_affected" : "=" }, { "version_value" : "1.203", "version_affected" : "=" }, { "version_value" : "1.204", "version_affected" : "=" }, { "version_value" : "1.205", "version_affected" : "=" }, { "version_value" : "1.206", "version_affected" : "=" }, { "version_value" : "1.207", "version_affected" : "=" }, { "version_value" : "1.208", "version_affected" : "=" }, { "version_value" : "1.209", "version_affected" : "=" }, { "version_value" : "1.210", "version_affected" : "=" }, { "version_value" : "1.211", "version_affected" : "=" }, { "version_value" : "1.212", "version_affected" : "=" }, { "version_value" : "1.213", "version_affected" : "=" }, { "version_value" : "1.214", "version_affected" : "=" }, { "version_value" : "1.215", "version_affected" : "=" }, { "version_value" : "1.216", "version_affected" : "=" }, { "version_value" : "1.217", "version_affected" : "=" }, { "version_value" : "1.218", "version_affected" : "=" }, { "version_value" : "1.219", "version_affected" : "=" }, { "version_value" : "1.220", "version_affected" : "=" }, { "version_value" : "1.221", "version_affected" : "=" }, { "version_value" : "1.222", "version_affected" : "=" }, { "version_value" : "1.223", "version_affected" : "=" }, { "version_value" : "1.224", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh", "name" : "http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13970", "name" : "13970", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14102", "name" : "14102", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012969", "name" : "1012969", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml", "name" : "GLSA-200502-01", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13137", "name" : "13137", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12336", "name" : "12336", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19032", "name" : "firehol-symlink(19032)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.70:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.72:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.73:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.74:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.75:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.76:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.77:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.78:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.79:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.80:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.81:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.82:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.83:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.84:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.85:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.86:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.87:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.88:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.89:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.93:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.94:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.95:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.96:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.97:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.98:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.101:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.102:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.103:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.104:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.105:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.107:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.108:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.109:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.110:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.111:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.112:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.113:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.114:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.115:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.116:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.117:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.118:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.119:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.120:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.121:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.122:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.123:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.124:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.125:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.126:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.127:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.128:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.129:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.130:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.131:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.132:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.133:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.134:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.135:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.136:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.137:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.138:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.139:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.140:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.141:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.142:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.143:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.144:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.145:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.146:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.147:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.148:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.149:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.150:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.151:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.152:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.153:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.154:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.155:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.156:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.157:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.158:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.159:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.160:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.161:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.162:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.163:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.164:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.165:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.166:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.167:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.168:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.169:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.170:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.171:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.172:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.173:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.174:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.175:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.176:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.177:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.178:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.179:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.181:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.182:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.183:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.184:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.185:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.186:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.187:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.188:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.189:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.190:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.191:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.192:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.193:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.194:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.195:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.196:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.197:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.198:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.199:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.200:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.201:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.202:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.203:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.204:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.205:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.206:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.207:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.208:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.209:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.210:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.211:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.212:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.213:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.214:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.215:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.216:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.217:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.218:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.219:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.220:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.221:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.222:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.223:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firehol:firehol:1.224:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0226", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ngircd", "product" : { "product_data" : [ { "product_name" : "ngircd", "version" : { "version_data" : [ { "version_value" : "0.8.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110746413108183&w=2", "name" : "20050203 ngIRCd <= v0.8.2 Format String Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14114/", "name" : "14114", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.nosystem.com.ar/advisories/advisory-11.txt", "name" : "http://www.nosystem.com.ar/advisories/advisory-11.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12434", "name" : "12434", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ngircd:ngircd:0.8.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-03T05:00Z", "lastModifiedDate" : "2016-10-18T03:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0227", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.4.6", "version_affected" : "=" }, { "version_value" : "7.4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php", "name" : "[pgsql-announce] 20050201 PostgreSQL Security Release", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php", "name" : "[pgsql-bugs] 20050121 Privilege escalation via LOAD", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110726899107148&w=2", "name" : "20050201 [USN-71-1] PostgreSQL vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12948", "name" : "12948", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-08.xml", "name" : "200502-08", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2005/dsa-668", "name" : "DSA-668", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040", "name" : "MDKSA-2005:040", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html", "name" : "RHSA-2005:138", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html", "name" : "RHSA-2005:150", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12411", "name" : "12411", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0003/", "name" : "2005-0003", "refsource" : "TRUSTIX", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234", "name" : "oval:org.mitre.oval:def:10234", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0228", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1388. Reason: This candidate is a duplicate of CVE-2004-1388. Notes: All CVE users should reference CVE-2004-1388 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0229", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrusdb", "product" : { "product_data" : [ { "product_name" : "citrusdb_customer_database", "version" : { "version_data" : [ { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110824766519417&w=2", "name" : "20050212 Credit Card data disclosure in CitrusDB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013040", "name" : "1013040", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.citrusdb.org/forums/viewtopic.php?t=49", "name" : "http://www.citrusdb.org/forums/viewtopic.php?t=49", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12402", "name" : "12402", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19145", "name" : "citrus-information-disclosure(19145)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0230", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110780995232064&w=2", "name" : "20050207 Firedragging [Firefox 1.0]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mikx.de/firedragging/", "name" : "http://www.mikx.de/firedragging/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-25.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-25.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12468", "name" : "12468", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=279945", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=279945", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033", "name" : "oval:org.mitre.oval:def:100033", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka \"firedragging.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0231", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110781134617144&w=2", "name" : "20050207 Firetabbing [Firefox 1.0]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mikx.de/firetabbing/", "name" : "http://www.mikx.de/firetabbing/", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-26.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-26.html", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html", "name" : "SUSE-SA:2005:016", "refsource" : "SUSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280056", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280056", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19264", "name" : "mozilla-firefox-tab-gain-access(19264)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032", "name" : "oval:org.mitre.oval:def:100032", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079", "name" : "oval:org.mitre.oval:def:10079", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka \"firetabbing.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-02-07T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0232", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110781055630856&w=2", "name" : "20050207 Fireflashing [Firefox 1.0]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mikx.de/fireflashing/", "name" : "http://www.mikx.de/fireflashing/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-27.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html", "name" : "SUSE-SA:2005:016", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280664", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=280664", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19266", "name" : "mozilla-firefox-aboutconfig-modify(19266)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967", "name" : "oval:org.mitre.oval:def:10967", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka \"Fireflashing.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0233", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "camino", "version" : { "version_data" : [ { "version_value" : "0.8.5", "version_affected" : "=" } ] } }, { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.2.1", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4.1", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.35", "version_affected" : "=" }, { "version_value" : "0.9.48", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "omnigroup", "product" : { "product_data" : [ { "product_name" : "omniweb", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opera_software", "product" : { "product_data" : [ { "product_name" : "opera_web_browser", "version" : { "version_data" : [ { "version_value" : "7.54", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2", "name" : "20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-29.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-29.html", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html", "name" : "SUSE-SA:2005:016", "refsource" : "SUSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029", "name" : "oval:org.mitre.oval:def:100029", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229", "name" : "oval:org.mitre.oval:def:11229", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:camino:0.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-08T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0234", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "1.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2", "name" : "20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0235", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "opera_software", "product" : { "product_data" : [ { "product_name" : "opera_web_browser", "version" : { "version_data" : [ { "version_value" : "7.54", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2", "name" : "20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html", "name" : "SUSE-SA:2005:031", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0236", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "omnigroup", "product" : { "product_data" : [ { "product_name" : "omniweb", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110782704923280&w=2", "name" : "20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0237", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "konqueror", "version" : { "version_data" : [ { "version_value" : "3.2.1", "version_affected" : "=" } ] } }, { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html", "name" : "20050206 Re: state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14162", "name" : "14162", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt", "name" : "http://www.kde.org/info/security/advisory-20050316-2.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058", "name" : "MDKSA-2005:058", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html", "name" : "RHSA-2005:325", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded", "name" : "FLSA:178606", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671", "name" : "oval:org.mitre.oval:def:10671", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0238", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "epiphany", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "camino", "version" : { "version_data" : [ { "version_value" : "0.8.5", "version_affected" : "=" } ] } }, { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.2.1", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4.1", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.35", "version_affected" : "=" }, { "version_value" : "0.9.48", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "omnigroup", "product" : { "product_data" : [ { "product_name" : "omniweb", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opera_software", "product" : { "product_data" : [ { "product_name" : "opera_web_browser", "version" : { "version_data" : [ { "version_value" : "7.54", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html", "name" : "20050206 state of homograph attacks", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12461", "name" : "12461", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.shmoo.com/idn", "name" : "http://www.shmoo.com/idn", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.shmoo.com/idn/homograph.txt", "name" : "http://www.shmoo.com/idn/homograph.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399", "name" : "https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19236", "name" : "multiple-browsers-idn-spoof(19236)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:camino:0.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:omnigroup:omniweb:5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0239", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squirrelmail", "product" : { "product_data" : [ { "product_name" : "s_mime_plugin", "version" : { "version_data" : [ { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=191&type=vulnerabilities&flashstatus=false", "name" : "20050207 SquirrelMail S/MIME Plugin Command Injection Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/502328", "name" : "VU#502328", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.squirrelmail.org/plugin_view.php?id=54", "name" : "http://www.squirrelmail.org/plugin_view.php?id=54", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19242", "name" : "squirrelmail-smime-command-execution(19242)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:s_mime_plugin:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squirrelmail:s_mime_plugin:0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0240", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities", "name" : "20050207 IBM AIX chdev Local Format String Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455", "name" : "IY67455", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654", "name" : "IY67654", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19244", "name" : "aix-chdev-format-string(19244)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0241", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931", "name" : "CLA-2005:931", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14091", "name" : "14091", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/823350", "name" : "VU#823350", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_06_squid.html", "name" : "SUSE-SA:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-060.html", "name" : "RHSA-2005:060", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-061.html", "name" : "RHSA-2005:061", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12412", "name" : "12412", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1216", "name" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1216", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19060", "name" : "squid-http-cache-poisoning(19060)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998", "name" : "oval:org.mitre.oval:def:10998", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling \"oversized\" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0242", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yahoo", "product" : { "product_data" : [ { "product_name" : "messenger", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.6", "version_affected" : "=" }, { "version_value" : "5.6.0.1351", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1750", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://messenger.yahoo.com/security/update6.html", "name" : "http://messenger.yahoo.com/security/update6.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/11815", "name" : "11815", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/secunia_research/2004-6/advisory/", "name" : "http://secunia.com/secunia_research/2004-6/advisory/", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-18T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0243", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yahoo", "product" : { "product_data" : [ { "product_name" : "messenger", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.6", "version_affected" : "=" }, { "version_value" : "5.6.0.1351", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1750", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13712", "name" : "13712", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2005-2/advisory/", "name" : "http://secunia.com/secunia_research/2005-2/advisory/", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-17T05:00Z", "lastModifiedDate" : "2008-09-05T20:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0244", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.3.4", "version_affected" : "=" }, { "version_value" : "7.3.5", "version_affected" : "=" }, { "version_value" : "7.3.6", "version_affected" : "=" }, { "version_value" : "7.3.7", "version_affected" : "=" }, { "version_value" : "7.3.8", "version_affected" : "=" }, { "version_value" : "7.3.9", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.4.6", "version_affected" : "=" }, { "version_value" : "7.4.7", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php", "name" : "[pgsql-hackers] 20050127 Permissions on aggregate component functions", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2", "name" : "20050210 [USN-79-1] PostgreSQL vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12948", "name" : "12948", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040", "name" : "MDKSA-2005:040", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html", "name" : "RHSA-2005:138", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12417", "name" : "12417", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19184", "name" : "postgresql-security-bypass(19184)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927", "name" : "oval:org.mitre.oval:def:10927", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0245", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.3.4", "version_affected" : "=" }, { "version_value" : "7.3.5", "version_affected" : "=" }, { "version_value" : "7.3.6", "version_affected" : "=" }, { "version_value" : "7.3.7", "version_affected" : "=" }, { "version_value" : "7.3.8", "version_affected" : "=" }, { "version_value" : "7.3.9", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.4.6", "version_affected" : "=" }, { "version_value" : "7.4.7", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php", "name" : "[pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php", "name" : "[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php", "name" : "[pgsql-patches] 20050120 Re: WIP: pl/pgsql cleanup", "refsource" : "MLIST", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2", "name" : "20050210 [USN-79-1] PostgreSQL vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12948", "name" : "12948", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-683", "name" : "DSA-683", "refsource" : "DEBIAN", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040", "name" : "MDKSA-2005:040", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html", "name" : "RHSA-2005:138", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html", "name" : "RHSA-2005:150", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12417", "name" : "12417", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19188", "name" : "postgresql-cursor-bo(19188)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175", "name" : "oval:org.mitre.oval:def:10175", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-01T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0246", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.3.4", "version_affected" : "=" }, { "version_value" : "7.3.5", "version_affected" : "=" }, { "version_value" : "7.3.6", "version_affected" : "=" }, { "version_value" : "7.3.7", "version_affected" : "=" }, { "version_value" : "7.3.8", "version_affected" : "=" }, { "version_value" : "7.3.9", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.4.6", "version_affected" : "=" }, { "version_value" : "7.4.7", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-committers/2005-01/msg00401.php", "name" : "[pgsql-committers] 20050127 pgsql: Fix security and 64-bit issues in contrib/intagg.", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2", "name" : "20050210 [USN-79-1] PostgreSQL vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12948", "name" : "12948", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040", "name" : "MDKSA-2005:040", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html", "name" : "RHSA-2005:138", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12417", "name" : "12417", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19185", "name" : "postgresql-contribintagg-dos(19185)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10148", "name" : "oval:org.mitre.oval:def:10148", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0247", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.3.4", "version_affected" : "=" }, { "version_value" : "7.3.5", "version_affected" : "=" }, { "version_value" : "7.3.6", "version_affected" : "=" }, { "version_value" : "7.3.7", "version_affected" : "=" }, { "version_value" : "7.3.8", "version_affected" : "=" }, { "version_value" : "7.3.9", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.4.6", "version_affected" : "=" }, { "version_value" : "7.4.7", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php", "name" : "[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110806034116082&w=2", "name" : "20050210 [USN-79-1] PostgreSQL vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-683", "name" : "DSA-683", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-19.xml", "name" : "GLSA-200502-19", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:040", "name" : "MDKSA-2005:040", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_27_postgresql.html", "name" : "SUSE-SA:2005:027", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-138.html", "name" : "RHSA-2005:138", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-150.html", "name" : "RHSA-2005:150", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12417", "name" : "12417", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19375", "name" : "postgresql-readsqlconstruct-bo(19375)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19376", "name" : "postgresql-makeselectstmt-input-bo(19376)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19377", "name" : "postgresql-makeselectstmt-arbitrary-bo(19377)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19378", "name" : "postgresql-fetch-makefetchstmt-bo(19378)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9345", "name" : "oval:org.mitre.oval:def:9345", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0248", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13803/", "name" : "13803", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012860", "name" : "1012860", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57717-1", "name" : "57717", "refsource" : "SUNALERT", "tags" : [ "Patch" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-096.shtml", "name" : "P-096", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12260", "name" : "12260", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18868", "name" : "solaris-smc-blank-password(18868)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0249", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "antivirus_scan_engine", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.8", "version_affected" : "=" }, { "version_value" : "4.1.9", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" } ] } }, { "product_name" : "brightmail_antispam", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" } ] } }, { "product_name" : "client_security", "version" : { "version_data" : [ { "version_value" : "1.0.1_build_8.01.434", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.437", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.446", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.457", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.460", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.464", "version_affected" : "=" }, { "version_value" : "1.0.1_build_8.01.471", "version_affected" : "=" }, { "version_value" : "1.1.1_mr1_build_8.1.1.314a", "version_affected" : "=" }, { "version_value" : "1.1.1_mr2_build_8.1.1.319", "version_affected" : "=" }, { "version_value" : "1.1.1_mr3_build_8.1.1.323", "version_affected" : "=" }, { "version_value" : "1.1.1_mr4_build_8.1.1.329", "version_affected" : "=" }, { "version_value" : "1.1.1_mr5_build_8.1.1.336", "version_affected" : "=" } ] } }, { "product_name" : "gateway_security", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "mail_security", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.5_build_719", "version_affected" : "=" } ] } }, { "product_name" : "norton_antivirus", "version" : { "version_data" : [ { "version_value" : "2.18_build_83", "version_affected" : "=" }, { "version_value" : "8.1.1.319", "version_affected" : "=" }, { "version_value" : "8.1.1.323", "version_affected" : "=" }, { "version_value" : "8.1.1.329", "version_affected" : "=" }, { "version_value" : "8.1.1_build8.1.1.314a", "version_affected" : "=" }, { "version_value" : "8.01.434", "version_affected" : "=" }, { "version_value" : "8.01.437", "version_affected" : "=" }, { "version_value" : "8.01.446", "version_affected" : "=" }, { "version_value" : "8.01.457", "version_affected" : "=" }, { "version_value" : "8.01.460", "version_affected" : "=" }, { "version_value" : "8.01.464", "version_affected" : "=" }, { "version_value" : "8.01.471", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "2004", "version_affected" : "=" } ] } }, { "product_name" : "norton_internet_security", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" } ] } }, { "product_name" : "norton_system_works", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" } ] } }, { "product_name" : "sav_filter_domino_nt_ports", "version" : { "version_data" : [ { "version_value" : "build3.0.5", "version_affected" : "=" } ] } }, { "product_name" : "sav_filter_for_domino_nt", "version" : { "version_data" : [ { "version_value" : "3.1.1", "version_affected" : "=" } ] } }, { "product_name" : "web_security", "version" : { "version_data" : [ { "version_value" : "3.01.59", "version_affected" : "=" }, { "version_value" : "3.01.60", "version_affected" : "=" }, { "version_value" : "3.01.61", "version_affected" : "=" }, { "version_value" : "3.01.62", "version_affected" : "=" }, { "version_value" : "3.01.63", "version_affected" : "=" }, { "version_value" : "3.01.67", "version_affected" : "=" }, { "version_value" : "3.01.68", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013133", "name" : "1013133", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.kb.cert.org/vuls/id/107822", "name" : "VU#107822", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.symantec.com/avcenter/security/Content/2005.02.08.html", "name" : "http://www.symantec.com/avcenter/security/Content/2005.02.08.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/187", "name" : "20050208 Symantec AntiVirus Library Heap Overflow", "refsource" : "ISS", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18869", "name" : "upx-engine-gain-control(18869)", "refsource" : "XF", "tags" : [ "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.3.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-08T05:00Z", "lastModifiedDate" : "2019-09-20T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0250", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14198", "name" : "14198", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013103", "name" : "1013103", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=193&type=vulnerabilities&flashstatus=false", "name" : "20050208 IBM AIX auditselect Local Format String Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/896729", "name" : "VU#896729", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12496", "name" : "12496", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67472", "name" : "IY67472", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67519", "name" : "IY67519", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY67802", "name" : "IY67802", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19255", "name" : "aix-auditselect-format-string(19255)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0251", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "biborb", "product" : { "product_data" : [ { "product_name" : "biborb", "version" : { "version_data" : [ { "version_value" : "1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12583", "name" : "12583", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:biborb:biborb:1.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0252", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "biborb", "product" : { "product_data" : [ { "product_name" : "biborb", "version" : { "version_data" : [ { "version_value" : "1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12583", "name" : "12583", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:biborb:biborb:1.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0253", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "biborb", "product" : { "product_data" : [ { "product_name" : "biborb", "version" : { "version_data" : [ { "version_value" : "1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12583", "name" : "12583", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the database_name parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:biborb:biborb:1.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0254", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "biborb", "product" : { "product_data" : [ { "product_name" : "biborb", "version" : { "version_data" : [ { "version_value" : "1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868948719773&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110864983905770&w=2", "name" : "20050217 Advisory: Multiple Vulnerabilities in BibORB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12583", "name" : "12583", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:biborb:biborb:1.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0255", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7.3", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=200&type=vulnerabilities", "name" : "20050228 Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-18.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-18.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html", "name" : "SUSE-SA:2005:016", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-277.html", "name" : "RHSA-2005:277", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html", "name" : "RHSA-2005:337", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100040", "name" : "oval:org.mitre.oval:def:100040", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9111", "name" : "oval:org.mitre.oval:def:9111", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0256", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "washington_university", "product" : { "product_data" : [ { "product_name" : "wu-ftpd", "version" : { "version_data" : [ { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.63/SCOSA-2005.63.txt", "name" : "SCOSA-2005.63", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00637342", "name" : "SSRT061110", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14411", "name" : "14411", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/18210", "name" : "18210", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19561", "name" : "19561", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101699-1", "name" : "101699", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57795-1", "name" : "57795", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-705", "name" : "DSA-705", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities", "name" : "20050225 WU-FTPD File Globbing Denial of Service Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/14203", "name" : "14203", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0588", "name" : "ADV-2005-0588", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2006/1271", "name" : "ADV-2006-1271", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1265", "name" : "oval:org.mitre.oval:def:1265", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1333", "name" : "oval:org.mitre.oval:def:1333", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1762", "name" : "oval:org.mitre.oval:def:1762", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0258", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.6c", "version_affected" : "=" }, { "version_value" : "2.0.6d", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.7a", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.8a", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0_beta1", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml", "name" : "GLSA-200503-02", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities", "name" : "20050222 phpBB Group phpBB2 Arbitrary File Unlink Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.phpbb.com/support/documents.php?mode=changelog", "name" : "http://www.phpbb.com/support/documents.php?mode=changelog", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via \"/../\" sequences in the avatarselect parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0259", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.6c", "version_affected" : "=" }, { "version_value" : "2.0.6d", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.7a", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.8a", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0_beta1", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14362/", "name" : "14362", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml", "name" : "GLSA-200503-02", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=204&type=vulnerabilities", "name" : "20050222 phpBB Group phpBB Arbitrary File Disclosure Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/774686", "name" : "VU#774686", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.phpbb.com/support/documents.php?mode=changelog", "name" : "http://www.phpbb.com/support/documents.php?mode=changelog", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the \"Upload Avatar from a URL:\" field to reference the target file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0260", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "brightstor_arcserve_backup", "version" : { "version_data" : [ { "version_value" : "11.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14183", "name" : "14183", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013138", "name" : "1013138", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1", "name" : "http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities", "name" : "20050209 Computer Associates BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19251", "name" : "brightstor-discovery-bo(19251)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0261", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14232", "name" : "14232", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=195&type=vulnerabilities", "name" : "20050210 IBM AIX lspath Local File Access Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12513", "name" : "12513", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only", "name" : "IY67457", "refsource" : "AIXAPAR", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only", "name" : "IY67655", "refsource" : "AIXAPAR", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19281", "name" : "ibm-aix-ispath-information-disclosure(19281)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0262", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14231", "name" : "14231", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=196&type=vulnerabilities", "name" : "20050210 IBM AIX ipl_varyon Local Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12516", "name" : "12516", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY66933&apar=only", "name" : "IY66933", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67750&apar=only", "name" : "IY67750", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67812&apar=only", "name" : "IY67812", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19282", "name" : "ibm-aix-iplvaryon-bo(19282)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0263", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "aix", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14237", "name" : "14237", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=197&type=vulnerabilities", "name" : "20050210 IBM AIX netpmon Local Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12517", "name" : "12517", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67124&apar=only", "name" : "IY67124", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67136&apar=only", "name" : "IY67136", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY67807&apar=only", "name" : "IY67807", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19278", "name" : "ibm-aix-netpmon-bo(19278)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0264", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owl", "product" : { "product_data" : [ { "product_name" : "owl_intranet_engine", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "0.72", "version_affected" : "=" }, { "version_value" : "0.73", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2", "name" : "20050101 Various Vulnerabilities in OWL Intranet Engine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13695", "name" : "13695", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12114", "name" : "12114", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18705", "name" : "owl-intranet-engine-xss(18705)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.72:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.73:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0265", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owl", "product" : { "product_data" : [ { "product_name" : "owl_intranet_engine", "version" : { "version_data" : [ { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110461644407935&w=2", "name" : "20050101 Various Vulnerabilities in OWL Intranet Engine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13695", "name" : "13695", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12114", "name" : "12114", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18704", "name" : "owl-intranet-engine-sql-injection(18704)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owl:owl_intranet_engine:0.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0266", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sugarcrm", "product" : { "product_data" : [ { "product_name" : "sugarcrm", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0f", "version_affected" : "=" }, { "version_value" : "1.0g", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1a", "version_affected" : "=" }, { "version_value" : "1.1b", "version_affected" : "=" }, { "version_value" : "1.1c", "version_affected" : "=" }, { "version_value" : "1.1d", "version_affected" : "=" }, { "version_value" : "1.1e", "version_affected" : "=" }, { "version_value" : "1.1f", "version_affected" : "=" }, { "version_value" : "1.5d", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.1a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110461706232174&w=2", "name" : "20050101 Cross Site Scripting Vulnerabilities and Possible Code Execution", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12113", "name" : "12113", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18719", "name" : "sugar-sales-index-xss(18719)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-01T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0267", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "flatnuke", "product" : { "product_data" : [ { "product_name" : "flatnuke", "version" : { "version_data" : [ { "version_value" : "2.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2", "name" : "20050102 Multiple Vulnerabilities in FlatNuke", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12150", "name" : "12150", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18741", "name" : "flatnuke-indexphp-gain-access(18741)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0268", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "flatnuke", "product" : { "product_data" : [ { "product_name" : "flatnuke", "version" : { "version_data" : [ { "version_value" : "2.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110477752916772&w=2", "name" : "20050102 Multiple Vulnerabilities in FlatNuke", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12150", "name" : "12150", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18746", "name" : "flatnuke-indexphp-xss(18746)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-03T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0269", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sir", "product" : { "product_data" : [ { "product_name" : "gnuboard", "version" : { "version_data" : [ { "version_value" : "3.30", "version_affected" : "=" }, { "version_value" : "3.31", "version_affected" : "=" }, { "version_value" : "3.32", "version_affected" : "=" }, { "version_value" : "3.33", "version_affected" : "=" }, { "version_value" : "3.34", "version_affected" : "=" }, { "version_value" : "3.35", "version_affected" : "=" }, { "version_value" : "3.36", "version_affected" : "=" }, { "version_value" : "3.37", "version_affected" : "=" }, { "version_value" : "3.38", "version_affected" : "=" }, { "version_value" : "3.39", "version_affected" : "=" }, { "version_value" : "3.40", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110477648219738&w=2", "name" : "20050103 STG Security Advisory: [SSA-20041224-21] File extensions", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13711", "name" : "13711", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12149", "name" : "12149", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18729", "name" : "gnuboard-gbupdate-file-upload(18729)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sir:gnuboard:3.40:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0270", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "reviewpost_php_pro", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.84", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2", "name" : "20050103 Serious Vulnerabilities In PhotoPost ReviewPost", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13697/", "name" : "13697", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "name" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18731", "name" : "reviewpost-php-xss(18731)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.84" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0271", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "reviewpost_php_pro", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2", "name" : "20050103 Serious Vulnerabilities In PhotoPost ReviewPost", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13697/", "name" : "13697", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "name" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18732", "name" : "reviewpost-php-sql-injection(18732)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.5.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-03T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0272", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "reviewpost_php_pro", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485682424110&w=2", "name" : "20050103 Serious Vulnerabilities In PhotoPost ReviewPost", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13697/", "name" : "13697", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "name" : "http://www.gulftech.org/?node=research&article_id=00062-01022005", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18735", "name" : "reviewpost-php-file-upload(18735)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:reviewpost_php_pro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.5.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0273", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "4.85", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2", "name" : "20050103 Multiple PhotoPost Pro Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13680/", "name" : "13680", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005", "name" : "http://www.gulftech.org/?node=research&article_id=00063-01032005", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12156", "name" : "12156", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744", "name" : "photopost-php-showgallery-xss(18744)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.85" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0274", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "4.85", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486165802196&w=2", "name" : "20050103 Multiple PhotoPost Pro Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13680/", "name" : "13680", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00063-01032005", "name" : "http://www.gulftech.org/?node=research&article_id=00063-01032005", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12156", "name" : "12156", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18744", "name" : "photopost-php-showgallery-xss(18744)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.85" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-03T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0275", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3cdaemon", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2", "name" : "20050104 3Com 3CDaemon Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18750", "name" : "3cdaemon-reserved-name-dos(18750)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0276", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3cdaemon", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2", "name" : "20050104 3Com 3CDaemon Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12155", "name" : "12155", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18751", "name" : "3cdaemon-login-dos(18751)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0277", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3cdaemon", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2", "name" : "20050104 3Com 3CDaemon Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110886719528518&w=2", "name" : "20050218 3com 3CDaemon FTP Unauthorized \"USER\" Remote BOverflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12155", "name" : "12155", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18754", "name" : "3cdaemon-long-command-dos(18754)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0278", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3cdaemon", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110485674622696&w=2", "name" : "20050104 3Com 3CDaemon Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12155", "name" : "12155", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18756", "name" : "3cdaemon-command-obtain-information(18756)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0279", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jowood_productions", "product" : { "product_data" : [ { "product_name" : "soldner_secret_wars", "version" : { "version_data" : [ { "version_value" : "30830", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2", "name" : "20050104 Socket termination, format string and XSS in Soldner Secret Wars", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13716", "name" : "13716", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12162", "name" : "12162", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18749", "name" : "soldner-secret-wars-dos(18749)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Soldner Secret Wars 30830 and earlier does not properly handle the \"message too long\" socket error, which allows remote attackers to cause a denial of service (socket termination) via a long UDP packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:*:*:*:*:*:*:*:*", "versionEndIncluding" : "30830" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0280", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jowood_productions", "product" : { "product_data" : [ { "product_name" : "soldner_secret_wars", "version" : { "version_data" : [ { "version_value" : "30830", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2", "name" : "20050104 Socket termination, format string and XSS in Soldner Secret Wars", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13716", "name" : "13716", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12162", "name" : "12162", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18752", "name" : "soldner-secret-wars-format-string(18752)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:30830:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-04T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0281", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jowood_productions", "product" : { "product_data" : [ { "product_name" : "soldner_secret_wars", "version" : { "version_data" : [ { "version_value" : "30830", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486654213504&w=2", "name" : "20050104 Socket termination, format string and XSS in Soldner Secret Wars", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13716", "name" : "13716", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12162", "name" : "12162", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18753", "name" : "soldner-secret-wars-xss(18753)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jowood_productions:soldner_secret_wars:*:*:*:*:*:*:*:*", "versionEndIncluding" : "30830" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0282", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mybulletinboard", "product" : { "product_data" : [ { "product_name" : "mybulletinboard", "version" : { "version_data" : [ { "version_value" : "1.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486566600980&w=2", "name" : "20050104 MyBB SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12161", "name" : "12161", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/187", "name" : "mybb-member-sql-injection(18755)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0283", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "david_barrett", "product" : { "product_data" : [ { "product_name" : "qwikiwiki", "version" : { "version_data" : [ { "version_value" : "1.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110486832621053&w=2", "name" : "20050104 QWikiwiki directory traversal vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12044", "name" : "12044", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.qwikiwiki.com/index.php?page=QwikiVulnerability", "name" : "http://www.qwikiwiki.com/index.php?page=QwikiVulnerability", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12163", "name" : "12163", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18748", "name" : "qwikiwiki-directory-traversal(18748)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-04T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0284", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "woltlab", "product" : { "product_data" : [ { "product_name" : "burning_book", "version" : { "version_data" : [ { "version_value" : "1.0_gold", "version_affected" : "=" }, { "version_value" : "1.1.1e", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110548032401506&w=2", "name" : "20050110 Woltlab Burning Book addentry.php SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18859", "name" : "woltlab-book-addentry-sql-injection(18859)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_book:1.0_gold:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_book:1.1.1e:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0285", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bottomline", "product" : { "product_data" : [ { "product_name" : "webseries_payment_application", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547396124885&w=2", "name" : "20050110 Portcullis Security Advisory 05-001", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13821", "name" : "13821", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012854", "name" : "1012854", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12216", "name" : "12216", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18848", "name" : "webseries-pa-url-security-bypass(18848)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0286", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emotion", "product" : { "product_data" : [ { "product_name" : "mediapartner_web_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547824902053&w=2", "name" : "20050110 Portcullis Security Advisory 05-004", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13820", "name" : "13820", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012855", "name" : "1012855", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12236", "name" : "12236", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18861", "name" : "mediapartner-bhtml-source-disclosure(18861)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emotion:mediapartner_web_server:5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0287", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bottomline", "product" : { "product_data" : [ { "product_name" : "webseries_payment_application", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110548383812462&w=2", "name" : "20050110 Portcullis Security Advisory 05-009", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13821", "name" : "13821", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012854", "name" : "1012854", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18862", "name" : "webseries-report-execution(18862)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0288", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bottomline", "product" : { "product_data" : [ { "product_name" : "webseries_payment_application", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110549684319400&w=2", "name" : "20050110 Portcullis Security Advisory 05-008", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13821", "name" : "13821", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012854", "name" : "1012854", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12231", "name" : "12231", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18860", "name" : "webseries-pa-password-gain-access(18860)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bottomline:webseries_payment_application:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-11T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0289", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "airport_express", "version" : { "version_data" : [ { "version_value" : "6.1", "version_affected" : "<=" } ] } }, { "product_name" : "airport_extreme", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html", "name" : "20050111 Apple Airport WDS DoS", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110582124528867&w=2", "name" : "20050115 Apple Airport WDS DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13753", "name" : "13753", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12152", "name" : "12152", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18865", "name" : "apple-airport-dos(18865)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0290", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netgear", "product" : { "product_data" : [ { "product_name" : "fvs318", "version" : { "version_data" : [ { "version_value" : "2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html", "name" : "20050117 Multiple Vulnerabilities in Netgear FVS318 Router", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2", "name" : "20050117 Multiple Vulnerabilities in Netgear FVS318 Router", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13787", "name" : "13787", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012913", "name" : "1012913", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securinews.com/vuln.htm?vulnid=103", "name" : "http://www.securinews.com/vuln.htm?vulnid=103", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12278", "name" : "12278", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18920", "name" : "netgear-fvs318-filter-bypass(18920)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netgear:fvs318:2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0291", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netgear", "product" : { "product_data" : [ { "product_name" : "fvs318", "version" : { "version_data" : [ { "version_value" : "2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html", "name" : "20050117 Multiple Vulnerabilities in Netgear FVS318 Router", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110599727631560&w=2", "name" : "20050117 Multiple Vulnerabilities in Netgear FVS318 Router", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13787", "name" : "13787", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012913", "name" : "1012913", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13012", "name" : "13012", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securinews.com/vuln.htm?vulnid=103", "name" : "http://www.securinews.com/vuln.htm?vulnid=103", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12278", "name" : "12278", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18921", "name" : "netgear-fvs318-log-xss(18921)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netgear:fvs318:2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0292", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_gift_registry", "product" : { "product_data" : [ { "product_name" : "phpgiftreg", "version" : { "version_data" : [ { "version_value" : "1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030965.html", "name" : "20050116 phpGiftReq SQL Injection", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110599710017066&w=2", "name" : "20050116 phpGiftReq SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13873", "name" : "13873", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012910", "name" : "1012910", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/392485", "name" : "20050307 Re: phpGiftReq SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12289", "name" : "12289", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18925", "name" : "phpgiftregistry-sql-injection(18925)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_gift_registry:phpgiftreg:1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0293", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "minis", "product" : { "product_data" : [ { "product_name" : "minis", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html", "name" : "20050116 Minis directory traversal vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2", "name" : "20050116 Minis directory traversal vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13866", "name" : "13866", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012911", "name" : "1012911", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12279", "name" : "12279", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18928", "name" : "minis-month-directory-traversal(18928)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:minis:minis:0.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0294", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "minis", "product" : { "product_data" : [ { "product_name" : "minis", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html", "name" : "20050116 Minis directory traversal vulnerability", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110599953704025&w=2", "name" : "20050116 Minis directory traversal vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13866", "name" : "13866", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012911", "name" : "1012911", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18929", "name" : "minis-month-dos(18929)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:minis:minis:0.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-16T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0295", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "inca", "product" : { "product_data" : [ { "product_name" : "nprotect_gameguard", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110608422029555&w=2", "name" : "20050116 Unrestricted I/O access vulnerability in INCA Gameguard", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13928", "name" : "13928", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12280", "name" : "12280", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18952", "name" : "nprotect-npptnt2-gain-access(18952)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:inca:nprotect_gameguard:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0296", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "groupwise", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" } ] } }, { "product_name" : "groupwise_webaccess", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110608203729814&w=2", "name" : "20050117 Novell GroupWise WebAccess error modules loading", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://support.novell.com/servlet/tidfinder/10096251", "name" : "http://support.novell.com/servlet/tidfinder/10096251", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html", "name" : "20050121 NOVL-2005-10096251 GroupWise WebAccess error handling modules (report)", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html", "name" : "20050127 NOVL-2005-10096251 GroupWise WebAccess error handling modules (report)", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13135", "name" : "13135", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12285", "name" : "12285", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18954", "name" : "groupwise-error-auth-bypass(18954)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the \"about\" information page. NOTE: the vendor has disputed this issue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.0:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.0:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise_webaccess:6.0:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-17T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0297", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110606477308492&w=2", "name" : "20050118 Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.2.1:r2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-18T05:00Z", "lastModifiedDate" : "2016-10-18T03:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0298", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_server", "version" : { "version_data" : [ { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.0.6.3", "version_affected" : "=" }, { "version_value" : "8.1.7.4", "version_affected" : "=" }, { "version_value" : "9.0.1.4", "version_affected" : "=" }, { "version_value" : "9.0.1.5", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.2.0.4", "version_affected" : "=" }, { "version_value" : "9.2.0.5", "version_affected" : "=" }, { "version_value" : "9.2.0.6", "version_affected" : "=" }, { "version_value" : "10.1.0.2", "version_affected" : "=" }, { "version_value" : "10.1.0.3", "version_affected" : "=" }, { "version_value" : "10.1.0.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110608912525883&w=2", "name" : "20050118 PeteFinnigan.com - Oracle security advisory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf", "name" : "http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.petefinnigan.com/directory_traversal.pdf", "name" : "http://www.petefinnigan.com/directory_traversal.pdf", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18947", "name" : "oracle-directory-lob-obtain-info(18947)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.1.0.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0299", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gforge", "product" : { "product_data" : [ { "product_name" : "gforge", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.21", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110627132209963&w=2", "name" : "20050120 STG Security Advisory: [SSA-20050120-24] GForge 3.x directory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012950", "name" : "1012950", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12318", "name" : "12318", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18988", "name" : "gforge-dir-dirname-directory-traversal(18988)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gforge:gforge:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gforge:gforge:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gforge:gforge:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gforge:gforge:3.21:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0300", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jsboard", "product" : { "product_data" : [ { "product_name" : "jsboard", "version" : { "version_data" : [ { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110627201120011&w=2", "name" : "20050120 STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13920", "name" : "13920", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012949", "name" : "1012949", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12319", "name" : "12319", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18990", "name" : "jsboard-session-file-include(18990)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jsboard:jsboard:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jsboard:jsboard:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jsboard:jsboard:2.0.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-20T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0301", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "comersus_open_technologies", "product" : { "product_data" : [ { "product_name" : "comersus_backoffice_lite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2", "name" : "20050121 bug report comersus Back Office Lite 6.0 and 6.0.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.comersus.org/forum/displayMessage.asp?mid=32753", "name" : "http://www.comersus.org/forum/displayMessage.asp?mid=32753", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "name" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19010", "name" : "backoffice-lite-administrative-bypass(19010)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0302", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "comersus_open_technologies", "product" : { "product_data" : [ { "product_name" : "comersus_backoffice_lite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2", "name" : "20050121 bug report comersus Back Office Lite 6.0 and 6.0.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "name" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19013", "name" : "backoffice-lite-sql-injection(19013)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0303", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "comersus_open_technologies", "product" : { "product_data" : [ { "product_name" : "comersus_backoffice_lite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110636597832556&w=2", "name" : "20050121 bug report comersus Back Office Lite 6.0 and 6.0.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "name" : "http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19014", "name" : "backoffice-lite-xss(19014)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0304", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "divx", "product" : { "product_data" : [ { "product_name" : "divx_player", "version" : { "version_data" : [ { "version_value" : "2.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/divxplayer-adv.txt", "name" : "http://aluigi.altervista.org/adv/divxplayer-adv.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110642748517854&w=2", "name" : "20050121 Arbitrary files overwriting through skins in DivX Player 2.6", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13969", "name" : "13969", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12332", "name" : "12332", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19030", "name" : "divx-player-directory-traversal(19030)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:divx:divx_player:2.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0305", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "siteman", "product" : { "product_data" : [ { "product_name" : "siteman", "version" : { "version_data" : [ { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110627350616949&w=2", "name" : "20050120 God Admin Injection Vulnerability in Siteman 1.0.x,", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110643320814371&w=2", "name" : "20050122 Siteman User Database Line Insertion Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012951", "name" : "1012951", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13131", "name" : "13131", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12304", "name" : "12304", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18998", "name" : "siteman-gain-access(18998)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siteman:siteman:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siteman:siteman:1.1.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0306", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2", "name" : "20050124 Multiple vulnerabilities in MercuryBoard 1.1.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12359", "name" : "12359", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19048", "name" : "mercuryboard-multiple-script-path-disclosure(19048)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-25T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0307", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2", "name" : "20050124 Multiple vulnerabilities in MercuryBoard 1.1.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12359", "name" : "12359", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19050", "name" : "mercuryboard-multiple-scripts-xss(19050)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-25T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0308", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ursoftware", "product" : { "product_data" : [ { "product_name" : "w32dasm", "version" : { "version_data" : [ { "version_value" : "8.94", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110661194108205&w=2", "name" : "20050124 Local buffer-overflow in W32Dasm 8.93", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13986", "name" : "13986", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012997", "name" : "1012997", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12352", "name" : "12352", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19044", "name" : "w32dasm-wsprintf-bo(19044)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ursoftware:w32dasm:8.94:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-24T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0309", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "exponent", "product" : { "product_data" : [ { "product_name" : "exponent", "version" : { "version_data" : [ { "version_value" : "0.95", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2", "name" : "20050125 Vulnerabilities in eXponent 0.95", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13188", "name" : "13188", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13190", "name" : "13190", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12358", "name" : "12358", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19061", "name" : "exponent-module-xss(19061)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-25T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0310", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "exponent", "product" : { "product_data" : [ { "product_name" : "exponent", "version" : { "version_data" : [ { "version_value" : "0.95", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110666998407073&w=2", "name" : "20050125 Vulnerabilities in eXponent 0.95", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19064", "name" : "exponent-pathoscoreversion-path-disclosure(19064)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0311", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ingate", "product" : { "product_data" : [ { "product_name" : "ingate_firewall", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110684375429946&w=2", "name" : "20050127 Ingate Firewall: Removed PPTP tunnels not deactivated", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14060", "name" : "14060", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013022", "name" : "1013022", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ingate.com/relnote-422.php", "name" : "http://www.ingate.com/relnote-422.php", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12383", "name" : "12383", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19123", "name" : "ingate-firewall-unath-access(19123)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ingate:ingate_firewall:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ingate:ingate_firewall:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ingate:ingate_firewall:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ingate:ingate_firewall:4.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0312", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "war_ftp_daemon", "product" : { "product_data" : [ { "product_name" : "war_ftp_daemon", "version" : { "version_data" : [ { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.82_rc9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110687202332039&w=2", "name" : "20050127 WarFTPD 1.82 RC9 DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643", "name" : "http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12384", "name" : "12384", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19129", "name" : "warftpd-cwd-dos(19129)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of \"%s\" sequences, possibly indicating a format string vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.82_rc9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-27T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0313", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "amax_information_technologies", "product" : { "product_data" : [ { "product_name" : "magic_winmail_server", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2", "name" : "20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14053", "name" : "14053", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013017", "name" : "1013017", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12388", "name" : "12388", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19108", "name" : "magicwinmail-uploadphp-file-upload(19108)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19114", "name" : "magic-winmail-command-directory-traversal(19114)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-27T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0314", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2", "name" : "20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14053", "name" : "14053", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013017", "name" : "1013017", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12388", "name" : "12388", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19113", "name" : "magic-winmail-userphp-xss(19113)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-27T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0315", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "amax_information_technologies", "product" : { "product_data" : [ { "product_name" : "magic_winmail_server", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110685011825461&w=2", "name" : "20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14053", "name" : "14053", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013017", "name" : "1013017", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12388", "name" : "12388", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19115", "name" : "magicwinmail-ftp-obtain-information(19115)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:amax_information_technologies:magic_winmail_server:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-27T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0316", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webwasher", "product" : { "product_data" : [ { "product_name" : "webwasher_classic", "version" : { "version_data" : [ { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110693045507245&w=2", "name" : "20050128 WebWasher Classic - HTTP CONNECT weakness", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14058", "name" : "14058", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013036", "name" : "1013036", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.oliverkarow.de/research/WebWasherCONNECT.txt", "name" : "http://www.oliverkarow.de/research/WebWasherCONNECT.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12394", "name" : "12394", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19144", "name" : "webwasher-classic-connect-gain-access(19144)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webwasher:webwasher_classic:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webwasher:webwasher_classic:3.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0317", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alt-n", "product" : { "product_data" : [ { "product_name" : "webadmin", "version" : { "version_data" : [ { "version_value" : "3.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2", "name" : "20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14079", "name" : "14079", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013038", "name" : "1013038", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12395", "name" : "12395", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19161", "name" : "webadmin-usereditaccountwdm-xss(19161)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alt-n:webadmin:3.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0318", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alt-n", "product" : { "product_data" : [ { "product_name" : "webadmin", "version" : { "version_data" : [ { "version_value" : "3.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2", "name" : "20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013038", "name" : "1013038", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12395", "name" : "12395", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alt-n:webadmin:3.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-28T05:00Z", "lastModifiedDate" : "2016-10-18T03:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0319", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alt-n", "product" : { "product_data" : [ { "product_name" : "webadmin", "version" : { "version_data" : [ { "version_value" : "3.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110692897003614&w=2", "name" : "20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12395", "name" : "12395", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19162", "name" : "webadmin-html-injection(19162)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alt-n:webadmin:3.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0320", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "icewarp", "product" : { "product_data" : [ { "product_name" : "web_mail", "version" : { "version_data" : [ { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2", "name" : "20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12396", "name" : "12396", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19147", "name" : "merak-icewarp-multiple-xss(19147)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icewarp:web_mail:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0321", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "icewarp", "product" : { "product_data" : [ { "product_name" : "web_mail", "version" : { "version_data" : [ { "version_value" : "5.3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "merak", "product" : { "product_data" : [ { "product_name" : "mail_server", "version" : { "version_data" : [ { "version_value" : "7.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2", "name" : "20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19152", "name" : "merak-icewarp-user-path-disclosure(19152)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icewarp:web_mail:5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:merak:mail_server:7.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0322", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "icewarp", "product" : { "product_data" : [ { "product_name" : "web_mail", "version" : { "version_data" : [ { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "merak", "product" : { "product_data" : [ { "product_name" : "mail_server", "version" : { "version_data" : [ { "version_value" : "7.6.0", "version_affected" : "=" }, { "version_value" : "7.6.4r", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110693950205007&w=2", "name" : "20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19153", "name" : "merak-icewarp-weak-password-encryption(19153)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icewarp:web_mail:5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icewarp:web_mail:5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:merak:mail_server:7.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:merak:mail_server:7.6.4r:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0323", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "captaris", "product" : { "product_data" : [ { "product_name" : "infinite_mobile_delivery_webmail", "version" : { "version_data" : [ { "version_value" : "2.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2", "name" : "20050129 XSS in Infinite Mobile Delivery v2.6 Webmail", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14075", "name" : "14075", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013044", "name" : "1013044", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.lovebug.org/imd_advisory.txt", "name" : "http://www.lovebug.org/imd_advisory.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12399", "name" : "12399", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19151", "name" : "infinite-mobile-delivery-xss(19151)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:captaris:infinite_mobile_delivery_webmail:2.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0324", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "captaris", "product" : { "product_data" : [ { "product_name" : "infinite_mobile_delivery_webmail", "version" : { "version_data" : [ { "version_value" : "2.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110703630922262&w=2", "name" : "20050129 XSS in Infinite Mobile Delivery v2.6 Webmail", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14075", "name" : "14075", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013044", "name" : "1013044", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.lovebug.org/imd_advisory.txt", "name" : "http://www.lovebug.org/imd_advisory.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12399", "name" : "12399", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19154", "name" : "infinite-mobile-delivery-path-disclosure(19154)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:captaris:infinite_mobile_delivery_webmail:2.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0325", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "techland", "product" : { "product_data" : [ { "product_name" : "xpand_rally", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/xprallyboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/xprallyboom-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html", "name" : "20050130 Broadcast crash in Xpand Rally 1.0.0.0", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110720064811485&w=2", "name" : "20050130 Broadcast crash in Xpand Rally 1.0.0.0", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14073", "name" : "14073", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013043", "name" : "1013043", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12409", "name" : "12409", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19150", "name" : "xpand-rally-memory-dos(19150)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:techland:xpand_rally:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0326", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2", "name" : "20050131 [PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19175", "name" : "pafiledb-login-path-disclosure(19175)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0327", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110720365923818&w=2", "name" : "20050131 [PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19176", "name" : "pafiledb-login-file-include(19176)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0328", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netgear", "product" : { "product_data" : [ { "product_name" : "rt311", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rt314", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "zyxel", "product" : { "product_data" : [ { "product_name" : "prestige", "version" : { "version_data" : [ { "version_value" : "310", "version_affected" : "=" }, { "version_value" : "314", "version_affected" : "=" }, { "version_value" : "324", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110720465527599&w=2", "name" : "20050131 Zyxel / Netgear and probably other routers leaking information.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20609", "name" : "zyxel-netgear-ping-information-disclosure(20609)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MAC address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netgear:rt311:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netgear:rt314:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:zyxel:prestige:310:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:zyxel:prestige:314:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:zyxel:prestige:324:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0329", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zipgenius", "product" : { "product_data" : [ { "product_name" : "zipgenius", "version" : { "version_data" : [ { "version_value" : "standard_5.5", "version_affected" : "=" }, { "version_value" : "suite_5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110736990230696&w=2", "name" : "20050202 7a69Adv#19 - ZipGenius unpack path disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14123", "name" : "14123", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013542", "name" : "1013542", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.7a69ezine.org/node/view/195", "name" : "http://www.7a69ezine.org/node/view/195", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12419", "name" : "12419", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19203", "name" : "zipgenius-path-disclosure(19203)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zipgenius:zipgenius:standard_5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zipgenius:zipgenius:suite_5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0330", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "people_can_fly", "product" : { "product_data" : [ { "product_name" : "painkiller", "version" : { "version_data" : [ { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/painkkeybof-adv.txt", "name" : "http://aluigi.altervista.org/adv/painkkeybof-adv.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110736915015707&w=2", "name" : "20050202 Limited buffer-overflow in Painkiller 1.35", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14113/", "name" : "14113", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013066", "name" : "1013066", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12423", "name" : "12423", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19205", "name" : "painkiller-long-cdkey-bo(19205)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:people_can_fly:painkiller:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:people_can_fly:painkiller:1.3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0331", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rarlab", "product" : { "product_data" : [ { "product_name" : "winrar", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10_beta3", "version_affected" : "=" }, { "version_value" : "3.10_beta5", "version_affected" : "=" }, { "version_value" : "3.11", "version_affected" : "=" }, { "version_value" : "3.20", "version_affected" : "=" }, { "version_value" : "3.40", "version_affected" : "=" }, { "version_value" : "3.41", "version_affected" : "=" }, { "version_value" : "3.42", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110737609604210&w=2", "name" : "20050202 7a69Adv#21 - WinRAR unpack one-folder path disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12422", "name" : "12422", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20585", "name" : "winrar-dotdotdotdirectory-traversal(20585)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0332", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ventia", "product" : { "product_data" : [ { "product_name" : "desknow_mail_and_collaboration_server", "version" : { "version_data" : [ { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110737616324614&w=2", "name" : "20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14116", "name" : "14116", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013060", "name" : "1013060", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.security.org.sg/vuln/desknow2512.html", "name" : "http://www.security.org.sg/vuln/desknow2512.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12421", "name" : "12421", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19206", "name" : "desknow-attachmentkey-file-upload(19206)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19211", "name" : "desknow-jsp-gain-access(19211)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19212", "name" : "desknow-filedo-file-deletion(19212)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ventia:desknow_mail_and_collaboration_server:2.5.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0333", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lanchat_pro_revival", "product" : { "product_data" : [ { "product_name" : "lanchat_pro_revival", "version" : { "version_data" : [ { "version_value" : "1.666c", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110746524021133&w=2", "name" : "20050203 DoS in LANChat Pro Revival 1.666c", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt", "name" : "http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12439", "name" : "12439", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19213", "name" : "lanchatpro-udp-packet-dos(19213)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lanchat_pro_revival:lanchat_pro_revival:1.666c:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0334", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linksys", "product" : { "product_data" : [ { "product_name" : "psus4_printserver", "version" : { "version_data" : [ { "version_value" : "6032", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110747234701646&w=2", "name" : "20050203 [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14136", "name" : "14136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12443", "name" : "12443", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19222", "name" : "linksys-psus4-dos(19222)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:linksys:psus4_printserver:6032:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0335", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emotion", "product" : { "product_data" : [ { "product_name" : "mediapartner_web_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2", "name" : "20050110 Portcullis Security Advisory 05-010", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13820", "name" : "13820", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012838", "name" : "1012838", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12236", "name" : "12236", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18842", "name" : "mediapartner-dotdot-directory-traversal(18842)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0336", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emotion", "product" : { "product_data" : [ { "product_name" : "mediapartner_web_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547214224714&w=2", "name" : "20050110 Portcullis Security Advisory 05-010", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13820", "name" : "13820", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012838", "name" : "1012838", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12236", "name" : "12236", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18845", "name" : "mediapartner-url-xss(18845)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emotion:mediapartner_web_server:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0337", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wietse_venema", "product" : { "product_data" : [ { "product_name" : "postfix", "version" : { "version_data" : [ { "version_value" : "2.1.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110763358832637&w=2", "name" : "20050204 [USN-74-1] Postfix vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14137/", "name" : "14137", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-152.html", "name" : "RHSA-2005:152", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12445", "name" : "12445", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19218", "name" : "postfix-ipv6-security-bypass(19218)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339", "name" : "oval:org.mitre.oval:def:11339", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wietse_venema:postfix:2.1.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0338", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "savant", "product" : { "product_data" : [ { "product_name" : "savant_webserver", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110756234611259&w=2", "name" : "20050204 Exploit For Savant Web Server 3.1 (tested on win2003)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110725682327452&w=2", "name" : "20050201 Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110728448025559&w=2", "name" : "20050201 Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12429", "name" : "12429", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19177", "name" : "savant-bo(19177)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:savant:savant_webserver:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0339", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "foxmail", "product" : { "product_data" : [ { "product_name" : "foxmail_email_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110763204301080&w=2", "name" : "20050205 Foxmail Server Remote Buffer Overflow Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12454", "name" : "12454", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19229", "name" : "foxmail-mailfrom-bo(19229)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0340", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "afp_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110791369419784&w=2", "name" : "20050208 AppleFileServer Denial of Service.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12478", "name" : "12478", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19263", "name" : "Applefileserver-fploginext-dos(19263)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:afp_server:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0341", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "1.2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110756965213819&w=2", "name" : "20050204 Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013087", "name" : "1013087", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://tigger.uic.edu/~jrockw2/safari_20050204.txt", "name" : "http://tigger.uic.edu/~jrockw2/safari_20050204.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19227", "name" : "safari-contenttype-xss(19227)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0342", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html", "name" : "APPLE-SA-2005-05-03", "refsource" : "APPLE", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110780124707975&w=2", "name" : "20050207 [OSX Finder] DS_Store arbitrary file overwrite vulnerability.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14188", "name" : "14188", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12458", "name" : "12458", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19253", "name" : "finder-dsstore-file-overwrite(19253)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0343", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "logicnow", "product" : { "product_data" : [ { "product_name" : "perldesk", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110782042532295&w=2", "name" : "20050207 [SePro Bugtraq] SQL-Injection in PerlDesk 1.x", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12512", "name" : "12512", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12471", "name" : "12471", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.security-project.org/projects/board/showthread.php?p=5172#post5172", "name" : "http://www.security-project.org/projects/board/showthread.php?p=5172#post5172", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19245", "name" : "perldesk-view-sql-injection(19245)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:logicnow:perldesk:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0344", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "software602", "product" : { "product_data" : [ { "product_name" : "602lan_suite", "version" : { "version_data" : [ { "version_value" : "2004.0.04.1221", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110793103506620&w=2", "name" : "20050208 [SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14169/", "name" : "14169", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013106", "name" : "1013106", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.security.org.sg/vuln/602lansuite1221.html", "name" : "http://www.security.org.sg/vuln/602lansuite1221.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19258", "name" : "602lansuite-webmail-directory-traversal(19258)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:software602:602lan_suite:2004.0.04.1221:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0345", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_fusion", "product" : { "product_data" : [ { "product_name" : "php_fusion", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110788267311132&w=2", "name" : "20050208 php-fusion 4.x vuln", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12482", "name" : "12482", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19257", "name" : "phpfusion-viewthread-obtain-information(19257)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_fusion:php_fusion:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0346", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "safenet", "product" : { "product_data" : [ { "product_name" : "softremote_vpn_client", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110791865522076&w=2", "name" : "20050208 SafeNet SoftRemote VPN Client Issue: Clear-text password", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013134", "name" : "1013134", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm", "name" : "http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19256", "name" : "softremote-vpn-password-disclosure(19256)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:safenet:softremote_vpn_client:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0347", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2", "name" : "20050208 Integer overflow and arbitrary files deletion in RealArcade", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14187/", "name" : "14187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013128", "name" : "1013128", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19259", "name" : "realarcade-rgs-bo(19259)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realarcade:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.2.0.994" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0348", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realarcade", "version" : { "version_data" : [ { "version_value" : "1.2.0.994", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110792779115794&w=2", "name" : "20050208 Integer overflow and arbitrary files deletion in RealArcade", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14187/", "name" : "14187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013128", "name" : "1013128", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12494", "name" : "12494", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19260", "name" : "realarcade-rgp-file-deletion(19260)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realarcade:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.2.0.994" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0349", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "brightstor_arcserve_backup", "version" : { "version_data" : [ { "version_value" : "11.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14233", "name" : "14233", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013144", "name" : "1013144", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0", "name" : "http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=198&type=vulnerabilities", "name" : "20050210 Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13706", "name" : "13706", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12522", "name" : "12522", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0145", "name" : "ADV-2005-0145", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0350", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f-secure", "product" : { "product_data" : [ { "product_name" : "f-secure_anti-virus", "version" : { "version_data" : [ { "version_value" : "4.52", "version_affected" : "<=" }, { "version_value" : "4.60", "version_affected" : "=" }, { "version_value" : "4.61", "version_affected" : "<=" }, { "version_value" : "5.01", "version_affected" : "<=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.43", "version_affected" : "<=" }, { "version_value" : "5.51", "version_affected" : "<=" }, { "version_value" : "5.55", "version_affected" : "<=" }, { "version_value" : "6.2", "version_affected" : "<=" }, { "version_value" : "6.31", "version_affected" : "<=" }, { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "f-secure_internet_security", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "f-secure_personal_express", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "<=" } ] } }, { "product_name" : "internet_gatekeeper", "version" : { "version_data" : [ { "version_value" : "2.06", "version_affected" : "=" }, { "version_value" : "6.41", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.f-secure.com/security/fsc-2005-1.shtml", "name" : "http://www.f-secure.com/security/fsc-2005-1.shtml", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/188", "name" : "20050210 F-Secure AntiVirus Library Heap Overflow", "refsource" : "ISS", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_workstations:*:*:*:*:*", "versionEndIncluding" : "4.52" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_gateways:*:*:*:*:*", "versionEndIncluding" : "4.61" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_servers:*:*:*:*:*", "versionEndIncluding" : "4.61" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_client_security:*:*:*:*:*", "versionEndIncluding" : "5.01" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_server_security:*:*:*:*:*", "versionEndIncluding" : "5.01" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*", "versionEndIncluding" : "5.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*", "versionEndIncluding" : "5.43" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*", "versionEndIncluding" : "5.51" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*", "versionEndIncluding" : "5.55" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:firewalls:*:*:*:*:*", "versionEndIncluding" : "6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:ms_exchange:*:*:*:*:*", "versionEndIncluding" : "6.31" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:f-secure_personal_express:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.10" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.06:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.41" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0351", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sco", "product" : { "product_data" : [ { "product_name" : "openserver", "version" : { "version_data" : [ { "version_value" : "5.0.6", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt", "name" : "SCOSA-2005.15", "refsource" : "SCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13062", "name" : "13062", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-07T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0352", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "woodstone", "product" : { "product_data" : [ { "product_name" : "servers_alive", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111100364513513&w=2", "name" : "20050316 Servers Alive: Local Privilege Escalation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14616/", "name" : "14616", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12822", "name" : "12822", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19715", "name" : "serversalive-gain-privileges(19715)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woodstone:servers_alive:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woodstone:servers_alive:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-16T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0353", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "safenet", "product" : { "product_data" : [ { "product_name" : "sentinel_license_manager", "version" : { "version_data" : [ { "version_value" : "7.2_.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111022094326772&w=2", "name" : "20050307 CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=111072872816405&w=2", "name" : "20050313 [HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14511", "name" : "14511", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cirt.dk/advisories/cirt-30-advisory.pdf", "name" : "http://www.cirt.dk/advisories/cirt-30-advisory.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/108790", "name" : "VU#108790", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12742", "name" : "12742", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19621", "name" : "sentinel-license-manager-bo(19621)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:safenet:sentinel_license_manager:7.2_.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0356", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "agent_desktop", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_access_control_list_manager", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_common_management_foundation", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_common_services", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_lms", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_vpn_security_management_solution", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_windows", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e-mail_manager", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "emergency_responder", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } }, { "product_name" : "intelligent_contact_manager", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } }, { "product_name" : "interactive_voice_response", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ip_contact_center_enterprise", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ip_contact_center_express", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "meetingplace", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "personal_assistant", "version" : { "version_data" : [ { "version_value" : "1.3(1)", "version_affected" : "=" }, { "version_value" : "1.3(2)", "version_affected" : "=" }, { "version_value" : "1.3(3)", "version_affected" : "=" }, { "version_value" : "1.3(4)", "version_affected" : "=" }, { "version_value" : "1.4(1)", "version_affected" : "=" }, { "version_value" : "1.4(2)", "version_affected" : "=" } ] } }, { "product_name" : "remote_monitoring_suite_option", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "secure_access_control_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.5.1", "version_affected" : "=" }, { "version_value" : "2.3.6.1", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.42", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2(1)", "version_affected" : "=" }, { "version_value" : "3.2(1.20)", "version_affected" : "=" }, { "version_value" : "3.2(2)", "version_affected" : "=" }, { "version_value" : "3.2(3)", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3(1)", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" } ] } }, { "product_name" : "support_tools", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "web_collaboration_option", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "webns", "version" : { "version_data" : [ { "version_value" : "7.10_(05.07)s", "version_affected" : "=" }, { "version_value" : "7.20_(03.09)s", "version_affected" : "=" }, { "version_value" : "7.20_(03.10)s", "version_affected" : "=" }, { "version_value" : "7.30_(00.08)s", "version_affected" : "=" }, { "version_value" : "7.30_(00.09)s", "version_affected" : "=" } ] } }, { "product_name" : "aironet_ap1200", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "aironet_ap350", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "call_manager", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1(2)", "version_affected" : "=" }, { "version_value" : "3.1(3a)", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3(3)", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11050", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11150", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11500", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11501", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11503", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11506", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_services_switch_11800", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "sn_5420_storage_router", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "unity_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.46", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_1105_hosting_solution_engine", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_1105_wireless_lan_solution_engine", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_cd1", "version" : { "version_data" : [ { "version_value" : "1st", "version_affected" : "=" }, { "version_value" : "2nd", "version_affected" : "=" }, { "version_value" : "3rd", "version_affected" : "=" }, { "version_value" : "4th", "version_affected" : "=" }, { "version_value" : "5th", "version_affected" : "=" } ] } }, { "product_name" : "ciscoworks_windows_wug", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "conference_connection", "version" : { "version_data" : [ { "version_value" : "1.1(1)", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" } ] } }, { "product_name" : "mgx_8230", "version" : { "version_data" : [ { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" } ] } }, { "product_name" : "mgx_8250", "version" : { "version_data" : [ { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" } ] } }, { "product_name" : "sn_5420_storage_router_firmware", "version" : { "version_data" : [ { "version_value" : "1.1(2)", "version_affected" : "=" }, { "version_value" : "1.1(3)", "version_affected" : "=" }, { "version_value" : "1.1(4)", "version_affected" : "=" }, { "version_value" : "1.1(5)", "version_affected" : "=" }, { "version_value" : "1.1(7)", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" } ] } }, { "product_name" : "sn_5428_storage_router", "version" : { "version_data" : [ { "version_value" : "2-3.3.1-k9", "version_affected" : "=" }, { "version_value" : "2-3.3.2-k9", "version_affected" : "=" }, { "version_value" : "2.5.1-k9", "version_affected" : "=" }, { "version_value" : "3.2.1-k9", "version_affected" : "=" }, { "version_value" : "3.2.2-k9", "version_affected" : "=" }, { "version_value" : "3.3.1-k9", "version_affected" : "=" }, { "version_value" : "3.3.2-k9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "hitachi", "product" : { "product_data" : [ { "product_name" : "alaxala", "version" : { "version_data" : [ { "version_value" : "ax", "version_affected" : "=" } ] } }, { "product_name" : "gr3000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "gr4000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "gs4000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "nortel", "product" : { "product_data" : [ { "product_name" : "business_communications_manager", "version" : { "version_data" : [ { "version_value" : "200", "version_affected" : "=" }, { "version_value" : "400", "version_affected" : "=" }, { "version_value" : "1000", "version_affected" : "=" } ] } }, { "product_name" : "callpilot", "version" : { "version_data" : [ { "version_value" : "200i", "version_affected" : "=" }, { "version_value" : "201i", "version_affected" : "=" }, { "version_value" : "702t", "version_affected" : "=" }, { "version_value" : "703t", "version_affected" : "=" } ] } }, { "product_name" : "contact_center", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "7220_wlan_access_point", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "7250_wlan_access_point", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ethernet_routing_switch_1612", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ethernet_routing_switch_1624", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ethernet_routing_switch_1648", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "optical_metro_5000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "optical_metro_5100", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "optical_metro_5200", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "succession_communication_server_1000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "survivable_remote_gateway", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "universal_signaling_point", "version" : { "version_data" : [ { "version_value" : "5200", "version_affected" : "=" }, { "version_value" : "compact_lite", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "alaxala", "product" : { "product_data" : [ { "product_name" : "alaxala_networks", "version" : { "version_data" : [ { "version_value" : "ax5400s", "version_affected" : "=" }, { "version_value" : "ax7800r", "version_affected" : "=" }, { "version_value" : "ax7800s", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "yamaha", "product" : { "product_data" : [ { "product_name" : "rt105", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rt250i", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rt300i", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rt57i", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rtv700", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rtx1000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rtx1100", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rtx1500", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "rtx2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "tmos", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" }, { "version_value" : "4.5.9", "version_affected" : "=" }, { "version_value" : "4.5.10", "version_affected" : "=" }, { "version_value" : "4.5.11", "version_affected" : "=" }, { "version_value" : "4.5.12", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "1.1.5.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.6.1", "version_affected" : "=" }, { "version_value" : "2.1.7.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "standard_64-bit", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "openbsd", "product" : { "product_data" : [ { "product_name" : "openbsd", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc", "name" : "FreeBSD-SA-05:15", "refsource" : "FREEBSD", "tags" : [ ] }, { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt", "name" : "SCOSA-2005.64", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15393", "name" : "15393", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15417/", "name" : "15417", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/18222", "name" : "18222", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18662", "name" : "18662", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm", "name" : "http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml", "name" : "20050518 Vulnerability in a Variant of the TCP Timestamps Option", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/637934", "name" : "VU#637934", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/13676", "name" : "13676", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20635", "name" : "tcp-ip-timestamp-dos(20635)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:agent_desktop:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:e-mail_manager:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:intelligent_contact_manager:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:interactive_voice_response:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ip_contact_center_enterprise:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ip_contact_center_express:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:meetingplace:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(3\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.3\\(4\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:remote_monitoring_suite_option:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.0:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.5.1:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.3.6.1:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.4:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.5:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.6:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:2.42:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.3:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.1.1:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1.20\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_access_control_server:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:support_tools:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_collaboration_option:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hitachi:alaxala:ax:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:unity_server:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:mgx_8230:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:mgx_8230:1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:mgx_8250:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:mgx_8250:1.2.11:*:*:*:*:*:*:*" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_access_control_list_manager:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_access_control_list_manager:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_lms:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_vpn_security_management_solution:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_windows:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:webns:7.10_\\(05.07\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:webns:7.20_\\(03.09\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:webns:7.20_\\(03.10\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:webns:7.30_\\(00.08\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:webns:7.30_\\(00.09\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:business_communications_manager:200:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:business_communications_manager:400:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:business_communications_manager:1000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:callpilot:200i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:callpilot:201i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:callpilot:702t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:callpilot:703t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nortel:contact_center:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11050:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11150:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11501:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11503:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11506:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_services_switch_11800:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:7220_wlan_access_point:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:7250_wlan_access_point:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:ethernet_routing_switch_1612:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:ethernet_routing_switch_1624:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:ethernet_routing_switch_1648:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:optical_metro_5000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:optical_metro_5100:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:optical_metro_5200:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:succession_communication_server_1000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:survivable_remote_gateway:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:universal_signaling_point:5200:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:universal_signaling_point:compact_lite:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_1105_hosting_solution_engine:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_1105_wireless_lan_solution_engine:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_cd1:1st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_cd1:2nd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_cd1:3rd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_cd1:4th:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_cd1:5th:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ciscoworks_windows_wug:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:conference_connection:1.1\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:alaxala:alaxala_networks:ax5400s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:alaxala:alaxala_networks:ax7800r:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:alaxala:alaxala_networks:ax7800s:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:sn_5420_storage_router:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:hitachi:gr3000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:hitachi:gr4000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:hitachi:gs4000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rt105:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rt250i:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rt300i:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rt57i:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rtv700:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rtx1000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rtx1100:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rtx1500:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:yamaha:rtx2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(4\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(5\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(7\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:2-3.3.1-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:2-3.3.2-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:2.5.1-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.2.1-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.2.2-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.3.1-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sn_5428_storage_router:3.3.2-k9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:f5:tmos:9.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-31T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0357", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emc", "product" : { "product_data" : [ { "product_name" : "legato_networker", "version" : { "version_data" : [ { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solstice_backup", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } }, { "product_name" : "storedge_enterprise_backup_software", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/16464", "name" : "16464", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/16470", "name" : "16470", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014713", "name" : "1014713", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1", "name" : "101886", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/606857", "name" : "VU#606857", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm", "name" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/18800", "name" : "18800", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14582", "name" : "14582", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21887", "name" : "legato-authunix-bypass-authentication(21887)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-08-23T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0358", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emc", "product" : { "product_data" : [ { "product_name" : "legato_networker", "version" : { "version_data" : [ { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solstice_backup", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } }, { "product_name" : "storedge_enterprise_backup_software", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/16464", "name" : "16464", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/16470", "name" : "16470", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014713", "name" : "1014713", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1", "name" : "101886", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/407641", "name" : "VU#407641", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm", "name" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.osvdb.org/18801", "name" : "18801", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14582", "name" : "14582", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21892", "name" : "legato-token-gain-privileges(21892)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-08-23T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0359", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "emc", "product" : { "product_data" : [ { "product_name" : "legato_networker", "version" : { "version_data" : [ { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solstice_backup", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } }, { "product_name" : "storedge_enterprise_backup_software", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/16464", "name" : "16464", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/16470", "name" : "16470", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014713", "name" : "1014713", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1", "name" : "101886", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/801089", "name" : "VU#801089", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm", "name" : "http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/18802", "name" : "18802", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14582", "name" : "14582", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21893", "name" : "legato-portmapper-obtain-information(21893)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-08-23T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0360", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "log_sink_class_activex_control", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/165022", "name" : "VU#165022", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as \"safe for scripting\" for Internet Explorer, which allows remote attackers to create or append to arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:log_sink_class_activex_control:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-07-05T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0362", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.7", "version_affected" : "=" }, { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/16089", "name" : "16089", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) \"pluginmode\", (2) \"loadplugin\", or (3) \"noloadplugin\" parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-09T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0363", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-682", "name" : "DSA-682", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0364", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "hp-ux", "version" : { "version_data" : [ { "version_value" : "11.00", "version_affected" : "=" }, { "version_value" : "11.11", "version_affected" : "=" }, { "version_value" : "11.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110805105200470&w=2", "name" : "HPSBUX01117", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14220/", "name" : "14220", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19276", "name" : "hpux-bind-dos(19276)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5690", "name" : "oval:org.mitre.oval:def:5690", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-10T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0365", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.2.x", "version_affected" : "=" }, { "version_value" : "3.3.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.kde.org/show_bug.cgi?id=97608", "name" : "http://bugs.kde.org/show_bug.cgi?id=97608", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA-2005-245.shtml", "name" : "FEDORA-2005-245", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110814653804757&w=2", "name" : "20050211 insecure temporary file creation in kdelibs 3.3.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14254", "name" : "14254", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-14.xml", "name" : "GLSA-200503-14", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013525", "name" : "1013525", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kde.org/info/security/advisory-20050316-2.txt", "name" : "http://www.kde.org/info/security/advisory-20050316-2.txt", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:045", "name" : "MDKSA-2005:045", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058", "name" : "MDKSA-2005:058", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html", "name" : "RHSA-2005:325", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10676", "name" : "oval:org.mitre.oval:def:10676", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.x:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.x:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0366", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openpgp", "product" : { "product_data" : [ { "product_name" : "openpgp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://eprint.iacr.org/2005/033", "name" : "http://eprint.iacr.org/2005/033", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://eprint.iacr.org/2005/033.pdf", "name" : "http://eprint.iacr.org/2005/033.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013166", "name" : "1013166", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-29.xml", "name" : "GLSA-200503-29", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/303094", "name" : "VU#303094", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:057", "name" : "MDKSA-2005:057", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_07_sr.html", "name" : "SUSE-SR:2005:007", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13775", "name" : "13775", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.pgp.com/library/ctocorner/openpgp.html", "name" : "http://www.pgp.com/library/ctocorner/openpgp.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12529", "name" : "12529", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openpgp:openpgp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0367", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "argosoft", "product" : { "product_data" : [ { "product_name" : "argosoft_mail_server", "version" : { "version_data" : [ { "version_value" : "1.8.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110796956011699&w=2", "name" : "20050209 [SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.security.org.sg/vuln/argosoftmail1873.html", "name" : "http://www.security.org.sg/vuln/argosoftmail1873.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-09T05:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0368", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chipmunk_scripts", "product" : { "product_data" : [ { "product_name" : "cmscore", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110803385223054&w=2", "name" : "20050209 CMS Core SQL injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14142/", "name" : "14142", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12457", "name" : "12457", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19235", "name" : "cmscore-multiple-sql-injection(19235)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chipmunk_scripts:cmscore:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0369", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "armagetron", "product" : { "product_data" : [ { "product_name" : "armagetron", "version" : { "version_data" : [ { "version_value" : "0.2.6.0", "version_affected" : "<=" } ] } }, { "product_name" : "armagetron_advanced", "version" : { "version_data" : [ { "version_value" : "0.2.7.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2", "name" : "20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron_advanced:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.7.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0370", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "armagetron", "product" : { "product_data" : [ { "product_name" : "armagetron", "version" : { "version_data" : [ { "version_value" : "0.2.6.0", "version_affected" : "<=" } ] } }, { "product_name" : "armagetron_advanced", "version" : { "version_data" : [ { "version_value" : "0.2.7.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2", "name" : "20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (network disconnection) via an empty UDP packet, which is not properly distinguished from the \"no new packets\" state of the associated socket." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron_advanced:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.7.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0371", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "armagetron", "product" : { "product_data" : [ { "product_name" : "armagetron", "version" : { "version_data" : [ { "version_value" : "0.2.5.2", "version_affected" : "=" }, { "version_value" : "0.2.6.0", "version_affected" : "=" } ] } }, { "product_name" : "armagetron_advanced", "version" : { "version_data" : [ { "version_value" : "0.2.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110811699206052&w=2", "name" : "20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (freeze) via a large number of player connections that do not send any data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron:0.2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron:0.2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:armagetron:armagetron_advanced:0.2.7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0372", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gtk", "product" : { "product_data" : [ { "product_name" : "gtk+", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "<=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000957", "name" : "CLSA-2005:957", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-686", "name" : "DSA-686", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-27.xml", "name" : "GLSA-200502-27", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:050", "name" : "MDKSA-2005:050", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-410.html", "name" : "RHSA-2005:410", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/advisories/8379", "name" : "FEDORA-2005-309", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/advisories/8380", "name" : "FEDORA-2005-310", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12539", "name" : "12539", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A717", "name" : "oval:org.mitre.oval:def:717", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9923", "name" : "oval:org.mitre.oval:def:9923", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.18:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0373", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyrus", "product" : { "product_data" : [ { "product_name" : "sasl", "version" : { "version_data" : [ { "version_value" : "1.5.24", "version_affected" : "=" }, { "version_value" : "1.5.27", "version_affected" : "=" }, { "version_value" : "1.5.28", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.18_r1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "openpkg", "product" : { "product_data" : [ { "product_name" : "openpkg", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_cvsup", "version" : { "version_data" : [ { "version_value" : "16.1h_36.i586", "version_affected" : "=" } ] } }, { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml", "name" : "GLSA-200410-05", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.linuxcompatible.org/print42495.html", "name" : "SUSE-SR:2005:006", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:054", "name" : "MDKSA-2005:054", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html", "name" : "[openbsd-ports] 20040717 UPDATE: cyrus-sasl-2.1.19", "refsource" : "MLIST", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/11347", "name" : "11347", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171", "name" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup", "name" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17642", "name" : "cyrus-sasl-digestmda5-bo(17642)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:suse:suse_cvsup:16.1h_36.i586:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-10-07T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0374", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitshifters", "product" : { "product_data" : [ { "product_name" : "bitboard", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110555988111899&w=2", "name" : "20050112 Security Advisory: BiTBOARD xss", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012864", "name" : "1012864", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12248", "name" : "12248", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18871", "name" : "bitshifters-bitboard-xss(18871)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an [img] bbcode image tag with an event such as mouseover." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitshifters:bitboard:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitshifters:bitboard:2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0375", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sergey_kiselev", "product" : { "product_data" : [ { "product_name" : "sgallery", "version" : { "version_data" : [ { "version_value" : "1.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012868", "name" : "1012868", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.waraxe.us/advisory-39.html", "name" : "http://www.waraxe.us/advisory-39.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18877", "name" : "sgallery-path-disclosure(18877)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0376", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sergey_kiselev", "product" : { "product_data" : [ { "product_name" : "sgallery", "version" : { "version_data" : [ { "version_value" : "1.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13824", "name" : "13824", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012868", "name" : "1012868", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.waraxe.us/advisory-39.html", "name" : "http://www.waraxe.us/advisory-39.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18878", "name" : "sgallery-file-include(18878)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that contains (1) config.php or (2) sql_layer.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-12T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0377", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sergey_kiselev", "product" : { "product_data" : [ { "product_name" : "sgallery", "version" : { "version_data" : [ { "version_value" : "1.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110557050700947&w=2", "name" : "20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13824", "name" : "13824", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012868", "name" : "1012868", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12249", "name" : "12249", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.waraxe.us/advisory-39.html", "name" : "http://www.waraxe.us/advisory-39.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18876", "name" : "sgallery-imageview-sql-injection(18876)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0378", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "horde", "product" : { "product_data" : [ { "product_name" : "horde", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110564059322774&w=2", "name" : "20050113 Cross Site Scripting holes found in Horde 3.0", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012892", "name" : "1012892", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.hyperdose.com/advisories/H2005-01.txt", "name" : "http://www.hyperdose.com/advisories/H2005-01.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12255", "name" : "12255", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18881", "name" : "horde-prefs-index-xss(18881)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0379", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeroboard", "product" : { "product_data" : [ { "product_name" : "zeroboard", "version" : { "version_data" : [ { "version_value" : "4.1_pl2", "version_affected" : "=" }, { "version_value" : "4.1_pl3", "version_affected" : "=" }, { "version_value" : "4.1_pl4", "version_affected" : "=" }, { "version_value" : "4.1_pl5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2", "name" : "20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012884", "name" : "1012884", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12257", "name" : "12257", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18891", "name" : "zeroboard-file-disclosure(18891)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0380", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeroboard", "product" : { "product_data" : [ { "product_name" : "zeroboard", "version" : { "version_data" : [ { "version_value" : "4.1_pl2", "version_affected" : "=" }, { "version_value" : "4.1_pl3", "version_affected" : "=" }, { "version_value" : "4.1_pl4", "version_affected" : "=" }, { "version_value" : "4.1_pl5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110565373407474&w=2", "name" : "20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13769", "name" : "13769", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012884", "name" : "1012884", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12928", "name" : "12928", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12929", "name" : "12929", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12930", "name" : "12930", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12931", "name" : "12931", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/12932", "name" : "12932", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12206", "name" : "12206", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12258", "name" : "12258", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892", "name" : "zeroboard-printcategory-file-include(18892)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893", "name" : "zeroboard-zero-vote-file-include(18893)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0381", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "forumkit", "product" : { "product_data" : [ { "product_name" : "forumkit", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110563769413994&w=2", "name" : "20050113 XSS Vulnerability in ForumKIT", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012895", "name" : "1012895", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12256", "name" : "12256", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18880", "name" : "forumkit-members-xss(18880)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web script or HTML via the members parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:forumkit:forumkit:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-13T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0382", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "breed", "product" : { "product_data" : [ { "product_name" : "breed", "version" : { "version_data" : [ { "version_value" : "patch_1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110565587010998&w=2", "name" : "20050113 Server crash in Breed patch #1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13211", "name" : "13211", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12262", "name" : "12262", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18890", "name" : "breed-udp-datagram-dos(18890)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:breed:breed:patch_1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0383", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trend_micro", "product" : { "product_data" : [ { "product_name" : "control_manager", "version" : { "version_data" : [ { "version_value" : "3.0_enterprise", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110564369316593&w=2", "name" : "20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110565281205427&w=2", "name" : "20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.cirt.dk/advisories/cirt-28-advisory.pdf", "name" : "http://www.cirt.dk/advisories/cirt-28-advisory.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18887", "name" : "control-manager-replay-attack(18887)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:3.0_enterprise:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0384", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "trustix", "product" : { "product_data" : [ { "product_name" : "secure_linux", "version" : { "version_data" : [ { "version_value" : "2", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html", "name" : "RHSA-2005:283", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html", "name" : "RHSA-2005:284", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12810", "name" : "12810", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0009/", "name" : "2005-0009", "refsource" : "TRUSTIX", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9562", "name" : "oval:org.mitre.oval:def:9562", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/95-1/", "name" : "USN-95-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0385", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "frank_mcingvale", "product" : { "product_data" : [ { "product_name" : "luxman", "version" : { "version_data" : [ { "version_value" : "0.41", "version_affected" : "=" }, { "version_value" : "0.41_17", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14582", "name" : "14582", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-693", "name" : "DSA-693", "refsource" : "DEBIAN", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.digitalmunition.com/DMA[2005-0310a].txt", "name" : "http://www.digitalmunition.com/DMA[2005-0310a].txt", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "http://www.securityfocus.com/archive/1/393195/2005-03-13/2005-03-19/0", "name" : "20050314 DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow'", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12797", "name" : "12797", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19680", "name" : "luxman-bo-execute-commands(19680)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:frank_mcingvale:luxman:0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:frank_mcingvale:luxman:0.41_17:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0386", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailreader.com", "product" : { "product_data" : [ { "product_name" : "mailreader.com", "version" : { "version_data" : [ { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14777", "name" : "14777", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-700", "name" : "DSA-700", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0387", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "remstats", "product" : { "product_data" : [ { "product_name" : "remstats", "version" : { "version_data" : [ { "version_value" : "1.0.8a", "version_affected" : "=" }, { "version_value" : "1.0.9b", "version_affected" : "=" }, { "version_value" : "1.0.13", "version_affected" : "=" }, { "version_value" : "1.00a4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-704", "name" : "DSA-704", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:remstats:remstats:1.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:remstats:remstats:1.0.9b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:remstats:remstats:1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:remstats:remstats:1.00a4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0388", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "remstats", "product" : { "product_data" : [ { "product_name" : "remstats", "version" : { "version_data" : [ { "version_value" : "1.0.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-704", "name" : "DSA-704", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands \"due to missing input sanitising.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:remstats:remstats:1.0.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0389", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0814. Reason: This candidate is a duplicate of CVE-2005-0814. Notes: All CVE users should reference CVE-2005-0814 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0390", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "axel", "product" : { "product_data" : [ { "product_name" : "axel", "version" : { "version_data" : [ { "version_value" : "1.0a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14831", "name" : "14831", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200504-09.xml", "name" : "GLSA-200504-09", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-706", "name" : "DSA-706", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mail-archive.com/debian-devel-changes@lists.debian.org/msg118978.html", "name" : "http://www.mail-archive.com/debian-devel-changes@lists.debian.org/msg118978.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13059", "name" : "13059", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:axel:axel:1.0a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0391", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "daniel_de_rauglaudre", "product" : { "product_data" : [ { "product_name" : "geneweb", "version" : { "version_data" : [ { "version_value" : "4.10", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-712", "name" : "DSA-712", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20176", "name" : "geneweb-insecure-file-permission(20176)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:daniel_de_rauglaudre:geneweb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.10" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0392", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "ppxp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-725", "name" : "DSA-725", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13681", "name" : "13681", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:ppxp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-19T04:00Z", "lastModifiedDate" : "2008-11-15T05:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0393", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "crip", "product" : { "product_data" : [ { "product_name" : "crip", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-733", "name" : "DSA-733", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:crip:crip:3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-07-05T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0395", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-06-09T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0396", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "dcopserver", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "<=" } ] } }, { "product_name" : "desktop_communication_protocol_daemon", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111099766716483&w=2", "name" : "20050316 Multiple KDE Security Advisories (2005-03-16)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-22.xml", "name" : "GLSA-200503-22", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kde.org/info/security/advisory-20050316-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050316-1.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:058", "name" : "MDKSA-2005:058", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-307.html", "name" : "RHSA-2005:307", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-325.html", "name" : "RHSA-2005:325", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded", "name" : "FLSA:178606", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12820", "name" : "12820", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10432", "name" : "oval:org.mitre.oval:def:10432", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by \"stalling the DCOP authentication process.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:dcopserver:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:desktop_communication_protocol_daemon:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0397", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83542", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83542", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110987256010857&w=2", "name" : "20050303 [USN-90-1] Imagemagick vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-702", "name" : "DSA-702", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-11.xml", "name" : "GLSA-200503-11", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html", "name" : "SUSE-SA:2005:017", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-320.html", "name" : "RHSA-2005:320", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19586", "name" : "imagemagick-filename-format-string(19586)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10302", "name" : "oval:org.mitre.oval:def:10302", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0398", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ipsec-tools", "product" : { "product_data" : [ { "product_name" : "ipsec-tools", "version" : { "version_data" : [ { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "kame", "product" : { "product_data" : [ { "product_name" : "racoon", "version" : { "version_data" : [ { "version_value" : "2003-07-11", "version_affected" : "=" }, { "version_value" : "2004-04-05", "version_affected" : "=" }, { "version_value" : "2004-04-07b", "version_affected" : "=" }, { "version_value" : "2004-05-03", "version_affected" : "=" }, { "version_value" : "2005-01-03", "version_affected" : "=" }, { "version_value" : "2005-01-10", "version_affected" : "=" }, { "version_value" : "2005-01-17", "version_affected" : "=" }, { "version_value" : "2005-01-24", "version_affected" : "=" }, { "version_value" : "2005-01-31", "version_affected" : "=" }, { "version_value" : "2005-02-07", "version_affected" : "=" }, { "version_value" : "2005-02-14", "version_affected" : "=" }, { "version_value" : "2005-02-21", "version_affected" : "=" }, { "version_value" : "2005-02-28", "version_affected" : "=" }, { "version_value" : "2005-03-07", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14584", "name" : "14584", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-33.xml", "name" : "GLSA-200503-33", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013433", "name" : "1013433", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000", "name" : "[ipsec-tools-devel] 20050312 potential remote crash in racoon", "refsource" : "MLIST", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:062", "name" : "MDKSA-2005:062", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-232.html", "name" : "RHSA-2005:232", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12804", "name" : "12804", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0264", "name" : "ADV-2005-0264", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view", "name" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19707", "name" : "racoon-isakmp-header-dos(19707)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028", "name" : "oval:org.mitre.oval:def:10028", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2003-07-11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2004-04-05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2004-04-07b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2004-05-03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-01-03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-01-10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-01-17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-01-24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-01-31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-02-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-02-14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-02-21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-02-28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kame:racoon:2005-03-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:*:*:desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:*:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0399", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt", "name" : "SCOSA-2005.49", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14654", "name" : "14654", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-160.shtml", "name" : "P-160", "refsource" : "CIAC", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/557948", "name" : "VU#557948", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-30.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-30.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-323.html", "name" : "RHSA-2005:323", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html", "name" : "RHSA-2005:336", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-337.html", "name" : "RHSA-2005:337", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12881", "name" : "12881", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/15495", "name" : "15495", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0296", "name" : "ADV-2005-0296", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/191", "name" : "20050323 Mozilla Foundation GIF Overflow", "refsource" : "ISS", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19269", "name" : "gif-extension-overflow(19269)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028", "name" : "oval:org.mitre.oval:def:100028", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377", "name" : "oval:org.mitre.oval:def:11377", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-05-03T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0400", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.11.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://arkoon.net/advisories/ext2-make-empty-leak.txt", "name" : "http://arkoon.net/advisories/ext2-make-empty-leak.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6", "name" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111238764720696&w=2", "name" : "20050401 Information leak in the Linux kernel ext2 implementation", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14713/", "name" : "14713", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18684", "name" : "18684", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html", "name" : "RHSA-2006:0190", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html", "name" : "RHSA-2006:0191", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12932", "name" : "12932", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19866", "name" : "kernel-ext2-information-disclosure(19866)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10336", "name" : "oval:org.mitre.oval:def:10336", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/103-1/", "name" : "USN-103-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.11.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0401", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111168413007891&w=2", "name" : "20050324 Firescrolling 2 [Firefox 1.0.1]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://mikx.de/firescrolling2/", "name" : "http://mikx.de/firescrolling2/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14654", "name" : "14654", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-32.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-32.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-335.html", "name" : "RHSA-2005:335", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html", "name" : "RHSA-2005:336", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12885", "name" : "12885", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0296", "name" : "ADV-2005-0296", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026", "name" : "oval:org.mitre.oval:def:100026", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650", "name" : "oval:org.mitre.oval:def:9650", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka \"Firescrolling 2.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-05-03T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0402", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14654", "name" : "14654", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-31.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-31.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-336.html", "name" : "RHSA-2005:336", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0296", "name" : "ADV-2005-0296", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=284627", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=284627", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100027", "name" : "oval:org.mitre.oval:def:100027", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11868", "name" : "oval:org.mitre.oval:def:11868", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0403", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144059", "name" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144059", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9435", "name" : "oval:org.mitre.oval:def:9435", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-09-01T22:03Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0404", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kmail", "product" : { "product_data" : [ { "product_name" : "kmail", "version" : { "version_data" : [ { "version_value" : "1.7.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.kde.org/show_bug.cgi?id=96020", "name" : "http://bugs.kde.org/show_bug.cgi?id=96020", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.html", "name" : "[kmail-devel] 20050215 [Bug 96020] HTML Allows Spoofing of Emails Content", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14925", "name" : "14925", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securiteam.com/unixfocus/5GP0B0AFFE.html", "name" : "http://www.securiteam.com/unixfocus/5GP0B0AFFE.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmail:kmail:1.7.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0406", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "image_processing_software", "product" : { "product_data" : [ { "product_name" : "image_processing_software", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html", "name" : "20050214 Advisory: JPEG EXIF information disclosure", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:image_processing_software:image_processing_software:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0407", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zakon_group", "product" : { "product_data" : [ { "product_name" : "openconf", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0_beta1", "version_affected" : "=" }, { "version_value" : "1.0_beta2", "version_affected" : "=" }, { "version_value" : "1.0_rc1", "version_affected" : "=" }, { "version_value" : "1.0_rc2", "version_affected" : "=" }, { "version_value" : "1.01", "version_affected" : "=" }, { "version_value" : "1.02", "version_affected" : "=" }, { "version_value" : "1.03", "version_affected" : "=" }, { "version_value" : "1.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0347.html", "name" : "20050214 Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14294", "name" : "14294", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12554", "name" : "12554", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.0_beta2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zakon_group:openconf:1.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0408", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrusdb", "product" : { "product_data" : [ { "product_name" : "citrusdb", "version" : { "version_data" : [ { "version_value" : "0.3.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html", "name" : "20050214 Advisory: Authentication bypass in CitrusDB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the \"boogaadeeboo\" string, which is hard-coded in the $hidden_hash variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0409", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrusdb", "product" : { "product_data" : [ { "product_name" : "citrusdb", "version" : { "version_data" : [ { "version_value" : "0.3.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html", "name" : "20050214 Advisory: Upload Authorization bypass in CitrusDB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0410", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrusdb", "product" : { "product_data" : [ { "product_name" : "citrusdb", "version" : { "version_data" : [ { "version_value" : "0.3.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html", "name" : "20050214 Advisory: SQL-Injection in CitrusDB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0411", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrusdb", "product" : { "product_data" : [ { "product_name" : "citrusdb", "version" : { "version_data" : [ { "version_value" : "0.3.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html", "name" : "20050214 Advisory: Directory traversal in CitrusDB", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt", "name" : "http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0412", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "spidean", "product" : { "product_data" : [ { "product_name" : "postwrap", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0065.html", "name" : "20050208 XSS VULNERABILITY AT MODULE PostWrap", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1013130", "name" : "1013130", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19261", "name" : "postwrap-xss(19261)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:spidean:postwrap:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0413", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "myphp_forum", "product" : { "product_data" : [ { "product_name" : "myphp_forum", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Feb/0125.html", "name" : "20050209 Several SQL injection bugs in myPHP Forum v.1.0", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14205", "name" : "14205", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013136", "name" : "1013136", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12501", "name" : "12501", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/27083", "name" : "27083", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19272", "name" : "myphpforum-multiple-sql-injection(19272)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39348", "name" : "myphpforum-member-sql-injection(39348)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/4822", "name" : "4822", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:myphp_forum:myphp_forum:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:myphp_forum:myphp_forum:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:myphp_forum:myphp_forum:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0414", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70", "name" : "http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110661795632354&w=2", "name" : "20050124 Multiple vulnerabilities in MercuryBoard 1.1.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110797495532358&w=2", "name" : "20050209 Mercuryboard =?iso-8859-1?Q?<=3D?= 1.1.1 Working Sql Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013137", "name" : "1013137", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051", "name" : "mercuryboard-index-sql-injection(19051)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0415", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ulrik_petersen", "product" : { "product_data" : [ { "product_name" : "emdros_database_engine", "version" : { "version_data" : [ { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "1.1.20", "version_affected" : "=" }, { "version_value" : "1.1.21", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sourceforge.net/project/shownotes.php?release_id=303465", "name" : "http://sourceforge.net/project/shownotes.php?release_id=303465", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19273", "name" : "emdros-mql-dos(19273)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL statements." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.1.21:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0416", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "enterprise", "version_affected" : "=" }, { "version_value" : "enterprise_64-bit", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" }, { "version_value" : "standard", "version_affected" : "=" }, { "version_value" : "web", "version_affected" : "=" } ] } }, { "product_name" : "windows_98", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_98se", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_me", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_nt", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://eeye.com/html/research/advisories/AD20050111.html", "name" : "http://eeye.com/html/research/advisories/AD20050111.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110547079218397&w=2", "name" : "20050111 EEYE: Windows ANI File Parsing Buffer Overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110556975827760&w=2", "name" : "20050112 Windows ANI File Parsing Proof Of Concept (MS05-002)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12233", "name" : "12233", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002", "name" : "MS05-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18879", "name" : "win-user32-aniheader-overflow(18879)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0417", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "db2_universal_database", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110801212422825&w=2", "name" : "20050209 Patch available for high risk IBM DB2 Universal Database flaw", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ngssoftware.com/advisories/db2-09-05-05.htm", "name" : "http://www.ngssoftware.com/advisories/db2-09-05-05.htm", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12508", "name" : "12508", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown \"high risk\" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2_universal_database:8.2:*:windows:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0418", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "j2se", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_01", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_03", "version_affected" : "=" }, { "version_value" : "1.4.2_04", "version_affected" : "=" }, { "version_value" : "1.4.2_05", "version_affected" : "=" }, { "version_value" : "1.4.2_06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html", "name" : "APPLE-SA-2005-03-24", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0419", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "3com", "product" : { "product_data" : [ { "product_name" : "3cserver", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110780306326130&w=2", "name" : "20050207 Vulnerability in 3Com 3CServer v1.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19250", "name" : "3cserver-multiple-command-bo(19250)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:3com:3cserver:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0420", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-601" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html", "name" : "20050206 Microsoft Outlook Web Access URL Injection Vulnerability", "refsource" : "FULLDISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/14144", "name" : "14144", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12459", "name" : "12459", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0105", "name" : "ADV-2005-0105", "refsource" : "VUPEN", "tags" : [ "Permissions Required" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19225", "name" : "owa-owalogonasp-url-redirect(19225)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2020-04-09T13:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0421", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "delphiturk", "product" : { "product_data" : [ { "product_name" : "delphiturk_ftp", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013139", "name" : "1013139", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248", "name" : "delphiturkcodebank-obtain-information(19248)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delphiturk:delphiturk_ftp:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0422", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "delphiturk", "product" : { "product_data" : [ { "product_name" : "codebank", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013139", "name" : "1013139", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19248", "name" : "delphiturkcodebank-obtain-information(19248)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delphiturk:codebank:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0423", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "aspjar", "product" : { "product_data" : [ { "product_name" : "aspjar_guestbook", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2", "name" : "20050210 ASPjar guestbook (Injection in login page)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14225/", "name" : "14225", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12521", "name" : "12521", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19299", "name" : "aspjar-guest-login-sql-injection(19299)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0424", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "aspjar", "product" : { "product_data" : [ { "product_name" : "aspjar_guestbook", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110809687921701&w=2", "name" : "20050210 ASPjar guestbook (Injection in login page)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14225/", "name" : "14225", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12521", "name" : "12521", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19301", "name" : "aspjar-delete-message-deletion(19301)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-27T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0425", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14274", "name" : "14274", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814", "name" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008814", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815", "name" : "http://www-1.ibm.com/support/docview.wss?uid=swg24008815", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0426", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57728-1", "name" : "57728", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12385", "name" : "12385", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19119", "name" : "solaris-udp-end-point-dos(19119)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via \"Heavy UDP Usage\" that triggers a NULL dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0427", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "webmin", "version" : { "version_data" : [ { "version_value" : "1.140", "version_affected" : "=" }, { "version_value" : "1.150", "version_affected" : "=" }, { "version_value" : "1.160", "version_affected" : "=" }, { "version_value" : "1.170", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=77731", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=77731", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-12.xml", "name" : "GLSA-200502-12", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19315", "name" : "webmin-encrypted-password(19315)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:webmin:1.140:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:webmin:1.150:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:webmin:1.160:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:webmin:1.170:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gentoo:webmin:1.170:r2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0428", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "powerdns", "product" : { "product_data" : [ { "product_name" : "powerdns", "version" : { "version_data" : [ { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17", "name" : "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21", "name" : "http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml", "name" : "GLSA-200502-15", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12446", "name" : "12446", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19221", "name" : "powerdns-random-bytes-dos(19221)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0429", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jelsoft", "product" : { "product_data" : [ { "product_name" : "vbulletin", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110840807415315&w=2", "name" : "20050213 vbulletin 3.0.x PHP code execution", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12542", "name" : "12542", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0430", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "id_software", "product" : { "product_data" : [ { "product_name" : "quake_3_engine", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/q3infoboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/q3infoboom-adv.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110824822224025&w=2", "name" : "20050212 Infostring crash and shutdown in the Quake 3 engine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12534", "name" : "12534", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-12T05:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0431", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "barracuda_networks", "product" : { "product_data" : [ { "product_name" : "barracuda_spam_firewall", "version" : { "version_data" : [ { "version_value" : "3.1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110805534732492&w=2", "name" : "20050210 Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14243", "name" : "14243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19283", "name" : "barracuda-open-relay(19283)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0432", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bea", "product" : { "product_data" : [ { "product_name" : "weblogic_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp", "name" : "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14298", "name" : "14298", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0433", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francisco_burzi", "product" : { "product_data" : [ { "product_name" : "php-nuke", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5_beta1", "version_affected" : "=" }, { "version_value" : "6.5_final", "version_affected" : "=" }, { "version_value" : "6.5_rc1", "version_affected" : "=" }, { "version_value" : "6.5_rc2", "version_affected" : "=" }, { "version_value" : "6.5_rc3", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.7", "version_affected" : "=" }, { "version_value" : "6.9", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0_final", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12561", "name" : "12561", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.waraxe.us/advisory-40.html", "name" : "http://www.waraxe.us/advisory-40.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19344", "name" : "phpnuke-multiple-scripts-path-disclosure(19344)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-15T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0434", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francisco_burzi", "product" : { "product_data" : [ { "product_name" : "php-nuke", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5_beta1", "version_affected" : "=" }, { "version_value" : "6.5_final", "version_affected" : "=" }, { "version_value" : "6.5_rc1", "version_affected" : "=" }, { "version_value" : "6.5_rc2", "version_affected" : "=" }, { "version_value" : "6.5_rc3", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.7", "version_affected" : "=" }, { "version_value" : "6.9", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0_final", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12561", "name" : "12561", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.waraxe.us/advisory-40.html", "name" : "http://www.waraxe.us/advisory-40.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19346", "name" : "phpnuke-downloads-weblinks-xss(19346)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-15T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0435", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14299", "name" : "14299", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/390368", "name" : "20050214 AWStats <= 6.4 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19333", "name" : "awstats-awstatpl-obtain-information(19333)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0436", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14299", "name" : "14299", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13832", "name" : "13832", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/390368", "name" : "20050214 AWStats <= 6.4 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19336", "name" : "awstats-function-code-execution(19336)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0437", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14299", "name" : "14299", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/390368", "name" : "20050214 AWStats <= 6.4 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0438", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "awstats", "product" : { "product_data" : [ { "product_name" : "awstats", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14299", "name" : "14299", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/390368", "name" : "20050214 AWStats <= 6.4 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19477", "name" : "awstats-information-disclosure(19477)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0439", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stefan_ritt", "product" : { "product_data" : [ { "product_name" : "elog_web_logbook", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://midas.psi.ch/elogs/Forum/941", "name" : "http://midas.psi.ch/elogs/Forum/941", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880", "name" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12556", "name" : "12556", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19313", "name" : "elog-weblog-bo(19313)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0440", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stefan_ritt", "product" : { "product_data" : [ { "product_name" : "elog_web_logbook", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://midas.psi.ch/elogs/Forum/941", "name" : "http://midas.psi.ch/elogs/Forum/941", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880", "name" : "http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12556", "name" : "12556", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0441", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sybase", "product" : { "product_data" : [ { "product_name" : "adaptive_server_enterprise", "version" : { "version_data" : [ { "version_value" : "11.03.3", "version_affected" : "=" }, { "version_value" : "11.5", "version_affected" : "=" }, { "version_value" : "11.5.1", "version_affected" : "=" }, { "version_value" : "11.9.2", "version_affected" : "=" }, { "version_value" : "12.0", "version_affected" : "=" }, { "version_value" : "12.0.1", "version_affected" : "=" }, { "version_value" : "12.5", "version_affected" : "=" }, { "version_value" : "12.5.2", "version_affected" : "=" }, { "version_value" : "12.5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html", "name" : "20041222 Sybase ASE 12.5.2 vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2", "name" : "20050405 Sybase ASE Multiple Security Issues (#NISR05042005)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13632", "name" : "13632", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt", "name" : "http://www.ngssoftware.com/advisories/sybase-ase.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/393851", "name" : "20050321 Details of Sybase ASE bugs withheld", "refsource" : "BUGTRAQ", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12080", "name" : "12080", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.sybase.com/detail/1,6904,1033894,00.html", "name" : "http://www.sybase.com/detail/1,6904,1033894,00.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.sybase.com/detail?id=1034520", "name" : "http://www.sybase.com/detail?id=1034520", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.sybase.com/detail?id=1034752", "name" : "http://www.sybase.com/detail?id=1034752", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354", "name" : "sybase-adaptive-server(19354)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19974", "name" : "sybase-ase-attribvalid-bo(19974)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19976", "name" : "sybase-ase-convert-bo(19976)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19978", "name" : "sybase-ase-declare-bo(19978)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19979", "name" : "sybase-ase-abstract-bo(19979)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19980", "name" : "sybase-ase-install-java-bo(19980)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or \"sa\" role privileges to execute arbitrary code via (5) a crafted install java statement." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2004-12-22T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0442", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "devellion", "product" : { "product_data" : [ { "product_name" : "cubecart", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2", "name" : "20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111281888605580&w=2", "name" : "20050406 RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14272", "name" : "14272", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741", "name" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12549", "name" : "12549", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19322", "name" : "cubecart-dotdot-directory-traversal(19322)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0443", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "devellion", "product" : { "product_data" : [ { "product_name" : "cubecart", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110842125901191&w=2", "name" : "20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741", "name" : "http://www.cubecart.com/site/forums/index.php?showtopic=5741", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14064", "name" : "14064", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12549", "name" : "12549", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19328", "name" : "cubecart-index-xss(19328)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0444", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vmware", "product" : { "product_data" : [ { "product_name" : "workstation", "version" : { "version_data" : [ { "version_value" : "4.5.2_build_8848", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://security.gentoo.org/glsa/glsa-200502-18.xml", "name" : "GLSA-200502-18", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vmware:workstation:*:r4:*:*:*:*:*:*", "versionEndIncluding" : "4.5.2_build_8848" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-14T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0445", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "open_webmail", "product" : { "product_data" : [ { "product_name" : "open_webmail", "version" : { "version_data" : [ { "version_value" : "2.00", "version_affected" : "=" }, { "version_value" : "2.01", "version_affected" : "=" }, { "version_value" : "2.10", "version_affected" : "=" }, { "version_value" : "2.20", "version_affected" : "=" }, { "version_value" : "2.21", "version_affected" : "=" }, { "version_value" : "2.30", "version_affected" : "=" }, { "version_value" : "2.32", "version_affected" : "=" }, { "version_value" : "2.40", "version_affected" : "=" }, { "version_value" : "2.41", "version_affected" : "=" }, { "version_value" : "2.50", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14253", "name" : "14253", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013172", "name" : "1013172", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt", "name" : "http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch", "name" : "http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12547", "name" : "12547", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19335", "name" : "open-webmail-logindomain-xss(19335)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_webmail:open_webmail:2.50:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0446", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0.patch1", "version_affected" : "=" }, { "version_value" : "2.0.patch2", "version_affected" : "=" }, { "version_value" : "2.0.pre1", "version_affected" : "=" }, { "version_value" : "2.0.release", "version_affected" : "=" }, { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1.patch1", "version_affected" : "=" }, { "version_value" : "2.1.patch2", "version_affected" : "=" }, { "version_value" : "2.1.pre1", "version_affected" : "=" }, { "version_value" : "2.1.pre3", "version_affected" : "=" }, { "version_value" : "2.1.pre4", "version_affected" : "=" }, { "version_value" : "2.1.release", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.2.devel3", "version_affected" : "=" }, { "version_value" : "2.2.devel4", "version_affected" : "=" }, { "version_value" : "2.2.pre1", "version_affected" : "=" }, { "version_value" : "2.2.pre2", "version_affected" : "=" }, { "version_value" : "2.2.stable1", "version_affected" : "=" }, { "version_value" : "2.2.stable2", "version_affected" : "=" }, { "version_value" : "2.2.stable3", "version_affected" : "=" }, { "version_value" : "2.2.stable4", "version_affected" : "=" }, { "version_value" : "2.2.stable5", "version_affected" : "=" }, { "version_value" : "2.3.devel2", "version_affected" : "=" }, { "version_value" : "2.3.devel3", "version_affected" : "=" }, { "version_value" : "2.3.stable1", "version_affected" : "=" }, { "version_value" : "2.3.stable2", "version_affected" : "=" }, { "version_value" : "2.3.stable3", "version_affected" : "=" }, { "version_value" : "2.3.stable4", "version_affected" : "=" }, { "version_value" : "2.3.stable5", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4.stable1", "version_affected" : "=" }, { "version_value" : "2.4.stable2", "version_affected" : "=" }, { "version_value" : "2.4.stable3", "version_affected" : "=" }, { "version_value" : "2.4.stable4", "version_affected" : "=" }, { "version_value" : "2.4.stable6", "version_affected" : "=" }, { "version_value" : "2.4.stable7", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5.stable8", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931", "name" : "CLA-2005:931", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110901183320453&w=2", "name" : "20050221 [USN-84-1] Squid vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14271", "name" : "14271", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-688", "name" : "DSA-688", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml", "name" : "GLSA-200502-25", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:047", "name" : "MDKSA-2005:047", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-173.html", "name" : "RHSA-2005:173", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-201.html", "name" : "RHSA-2005:201", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12551", "name" : "12551", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19332", "name" : "squid-xstrndup-dos(19332)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264", "name" : "oval:org.mitre.oval:def:11264", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0447", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.7", "version_affected" : "=" }, { "version_value" : "5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14286", "name" : "14286", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013179", "name" : "1013179", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1", "name" : "57673", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12553", "name" : "12553", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19331", "name" : "solaris-arp-dos(19331)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-15T05:00Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0448", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "larry_wall", "product" : { "product_data" : [ { "product_name" : "perl", "version" : { "version_data" : [ { "version_value" : "5.8.0", "version_affected" : "=" }, { "version_value" : "5.8.1", "version_affected" : "=" }, { "version_value" : "5.8.3", "version_affected" : "=" }, { "version_value" : "5.8.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U", "name" : "20060101-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056", "name" : "CLSA-2006:1056", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152845", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14531", "name" : "14531", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17079", "name" : "17079", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18075", "name" : "18075", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18517", "name" : "18517", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55314", "name" : "55314", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-696", "name" : "DSA-696", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml", "name" : "GLSA-200501-38", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079", "name" : "MDKSA-2005:079", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-674.html", "name" : "RHSA-2005:674", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-881.html", "name" : "RHSA-2005:881", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/advisories/8704", "name" : "HPSBUX01208", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12767", "name" : "12767", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475", "name" : "oval:org.mitre.oval:def:10475", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728", "name" : "oval:org.mitre.oval:def:728", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/94-1/", "name" : "USN-94-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 1.2 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0449", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U", "name" : "20060402-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945", "name" : "CLA-2005:945", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html", "name" : "[netdev] 20050124 Re: skb_checksum_help", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19369", "name" : "19369", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19374", "name" : "19374", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19607", "name" : "19607", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2006/dsa-1017", "name" : "DSA-1017", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1018", "name" : "DSA-1018", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218", "name" : "MDKSA-2005:218", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html", "name" : "RHSA-2005:283", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html", "name" : "RHSA-2005:284", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12598", "name" : "12598", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753", "name" : "oval:org.mitre.oval:def:10753", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/82-1/", "name" : "USN-82-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.1 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0450", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sami", "product" : { "product_data" : [ { "product_name" : "sami_http_server", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14283", "name" : "14283", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013191", "name" : "1013191", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) \"%2e%2e\" (encoded dot dot) sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sami:sami_http_server:1.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0451", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sami", "product" : { "product_data" : [ { "product_name" : "sami_http_server", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14283", "name" : "14283", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013191", "name" : "1013191", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sami:sami_http_server:1.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0452", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "asp.net", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml", "name" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2", "name" : "20050217 XSS vulnerabilty in ASP.Net [with details]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14214", "name" : "14214", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12574", "name" : "12574", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including \">\" and \"<\"." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net:1.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net:1.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-16T05:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0453", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lighttpd", "product" : { "product_data" : [ { "product_name" : "lighttpd", "version" : { "version_data" : [ { "version_value" : "1.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://article.gmane.org/gmane.comp.web.lighttpd/1171", "name" : "http://article.gmane.org/gmane.comp.web.lighttpd/1171", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14297", "name" : "14297", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-21.xml", "name" : "GLSA-200502-21", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-16T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0454", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "codeworx_technologies", "product" : { "product_data" : [ { "product_name" : "dcp-portal", "version" : { "version_data" : [ { "version_value" : "6.1.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://glide.stanford.edu/yichen/research/sec.pdf", "name" : "http://glide.stanford.edu/yichen/research/sec.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110858497207809&w=2", "name" : "20050216 [hackgen-2005-#003] - SQL injection bugs in DCP-Portal", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securityreason.com/securityalert/108", "name" : "108", "refsource" : "SREASON", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013216", "name" : "1013216", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.hackgen.org/advisories/hackgen-2005-003.txt", "name" : "http://www.hackgen.org/advisories/hackgen-2005-003.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/419280/100/0/threaded", "name" : "20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12573", "name" : "12573", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19361", "name" : "dcpportal-multiple-sql-injection(19361)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.1.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0455", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://service.real.com/help/faq/security/050224_player", "name" : "http://service.real.com/help/faq/security/050224_player", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities", "name" : "20050301 RealNetworks RealPlayer .smil Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html", "name" : "RHSA-2005:265", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html", "name" : "RHSA-2005:271", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926", "name" : "oval:org.mitre.oval:def:10926", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0456", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "opera_software", "product" : { "product_data" : [ { "product_name" : "opera_web_browser", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.12", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.10", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0_beta1", "version_affected" : "=" }, { "version_value" : "7.0_beta2", "version_affected" : "=" }, { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.11", "version_affected" : "=" }, { "version_value" : "7.11b", "version_affected" : "=" }, { "version_value" : "7.11j", "version_affected" : "=" }, { "version_value" : "7.20", "version_affected" : "=" }, { "version_value" : "7.20_beta1_build2981", "version_affected" : "=" }, { "version_value" : "7.21", "version_affected" : "=" }, { "version_value" : "7.22", "version_affected" : "=" }, { "version_value" : "7.23", "version_affected" : "=" }, { "version_value" : "7.50", "version_affected" : "=" }, { "version_value" : "7.51", "version_affected" : "=" }, { "version_value" : "7.52", "version_affected" : "=" }, { "version_value" : "7.53", "version_affected" : "=" }, { "version_value" : "7.54", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13818/", "name" : "13818", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml", "name" : "GLSA-200502-17", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/882926", "name" : "VU#882926", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_31_opera.html", "name" : "SUSE-SA:2005:031", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.opera.com/linux/changelogs/754u2/", "name" : "http://www.opera.com/linux/changelogs/754u2/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18867", "name" : "opera-data-dialog-spoofing(18867)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.0:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.0:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.0.2:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.1.0:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.1.1:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:5.12:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.2:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.2:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.3:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.3:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.4:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.5:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.0.6:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:6.10:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0.1:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0.2:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0.3:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0_beta1:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.0_beta2:*:win32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.11b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.11j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.20_beta1_build2981:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:9.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-12T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0457", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "opera_software", "product" : { "product_data" : [ { "product_name" : "opera_web_browser", "version" : { "version_data" : [ { "version_value" : "7.50", "version_affected" : "=" }, { "version_value" : "7.50b1", "version_affected" : "=" }, { "version_value" : "7.52", "version_affected" : "=" }, { "version_value" : "7.53", "version_affected" : "=" }, { "version_value" : "7.54", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81747", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=81747", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml", "name" : "GLSA-200502-17", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.50b1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0458", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oscommerce", "product" : { "product_data" : [ { "product_name" : "oscommerce", "version" : { "version_data" : [ { "version_value" : "2.2_ms2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110851122614995&w=2", "name" : "20050215 [NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0459", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2_pre1", "version_affected" : "=" }, { "version_value" : "2.2_rc1", "version_affected" : "=" }, { "version_value" : "2.2_rc2", "version_affected" : "=" }, { "version_value" : "2.2_rc3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.5_pl1", "version_affected" : "=" }, { "version_value" : "2.5.5_rc1", "version_affected" : "=" }, { "version_value" : "2.5.5_rc2", "version_affected" : "=" }, { "version_value" : "2.5.6_rc1", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.7_pl1", "version_affected" : "=" }, { "version_value" : "2.6.0_pl1", "version_affected" : "=" }, { "version_value" : "2.6.0_pl2", "version_affected" : "=" }, { "version_value" : "2.6.0_pl3", "version_affected" : "=" }, { "version_value" : "2.6.2_dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013210", "name" : "1013210", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0460", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html", "name" : "http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14284", "name" : "14284", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13787", "name" : "13787", "refsource" : "OSVDB", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0461", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016", "name" : "http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup", "name" : "http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14262", "name" : "14262", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to \"take actions on comments.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:leonard_richardson:newsbruiser:2.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0462", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html", "name" : "http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13937", "name" : "13937", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-17T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0463", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "inl", "product" : { "product_data" : [ { "product_name" : "ulog-php", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14321", "name" : "14321", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013220", "name" : "1013220", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.inl.fr/article.php3?id_article=7", "name" : "http://www.inl.fr/article.php3?id_article=7", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13853", "name" : "13853", "refsource" : "OSVDB", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12610", "name" : "12610", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown \"major security flaws\" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:inl:ulog-php:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:inl:ulog-php:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:inl:ulog-php:0.8.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0464", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "irix", "version" : { "version_data" : [ { "version_value" : "6.5.22", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P", "name" : "20050402-01-P", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14875", "name" : "14875", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013662", "name" : "1013662", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities", "name" : "20050407 SGI IRIX gr_osview Information Disclosure Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/15351", "name" : "15351", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0465", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "irix", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.1t", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.4b", "version_affected" : "=" }, { "version_value" : "4.0.4t", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.5_iop", "version_affected" : "=" }, { "version_value" : "4.0.5_ipr", "version_affected" : "=" }, { "version_value" : "4.0.5a", "version_affected" : "=" }, { "version_value" : "4.0.5b", "version_affected" : "=" }, { "version_value" : "4.0.5e", "version_affected" : "=" }, { "version_value" : "4.0.5f", "version_affected" : "=" }, { "version_value" : "4.0.5g", "version_affected" : "=" }, { "version_value" : "4.0.5h", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "6.5.2", "version_affected" : "=" }, { "version_value" : "6.5.2f", "version_affected" : "=" }, { "version_value" : "6.5.2m", "version_affected" : "=" }, { "version_value" : "6.5.3", "version_affected" : "=" }, { "version_value" : "6.5.3f", "version_affected" : "=" }, { "version_value" : "6.5.3m", "version_affected" : "=" }, { "version_value" : "6.5.4", "version_affected" : "=" }, { "version_value" : "6.5.4f", "version_affected" : "=" }, { "version_value" : "6.5.4m", "version_affected" : "=" }, { "version_value" : "6.5.5", "version_affected" : "=" }, { "version_value" : "6.5.5f", "version_affected" : "=" }, { "version_value" : "6.5.5m", "version_affected" : "=" }, { "version_value" : "6.5.6", "version_affected" : "=" }, { "version_value" : "6.5.6f", "version_affected" : "=" }, { "version_value" : "6.5.6m", "version_affected" : "=" }, { "version_value" : "6.5.7", "version_affected" : "=" }, { "version_value" : "6.5.7f", "version_affected" : "=" }, { "version_value" : "6.5.7m", "version_affected" : "=" }, { "version_value" : "6.5.8", "version_affected" : "=" }, { "version_value" : "6.5.8f", "version_affected" : "=" }, { "version_value" : "6.5.8m", "version_affected" : "=" }, { "version_value" : "6.5.9", "version_affected" : "=" }, { "version_value" : "6.5.9f", "version_affected" : "=" }, { "version_value" : "6.5.9m", "version_affected" : "=" }, { "version_value" : "6.5.10", "version_affected" : "=" }, { "version_value" : "6.5.10f", "version_affected" : "=" }, { "version_value" : "6.5.10m", "version_affected" : "=" }, { "version_value" : "6.5.11", "version_affected" : "=" }, { "version_value" : "6.5.11f", "version_affected" : "=" }, { "version_value" : "6.5.11m", "version_affected" : "=" }, { "version_value" : "6.5.12", "version_affected" : "=" }, { "version_value" : "6.5.12f", "version_affected" : "=" }, { "version_value" : "6.5.12m", "version_affected" : "=" }, { "version_value" : "6.5.13", "version_affected" : "=" }, { "version_value" : "6.5.13f", "version_affected" : "=" }, { "version_value" : "6.5.13m", "version_affected" : "=" }, { "version_value" : "6.5.14", "version_affected" : "=" }, { "version_value" : "6.5.14f", "version_affected" : "=" }, { "version_value" : "6.5.14m", "version_affected" : "=" }, { "version_value" : "6.5.15", "version_affected" : "=" }, { "version_value" : "6.5.15f", "version_affected" : "=" }, { "version_value" : "6.5.15m", "version_affected" : "=" }, { "version_value" : "6.5.16", "version_affected" : "=" }, { "version_value" : "6.5.16f", "version_affected" : "=" }, { "version_value" : "6.5.16m", "version_affected" : "=" }, { "version_value" : "6.5.17", "version_affected" : "=" }, { "version_value" : "6.5.17f", "version_affected" : "=" }, { "version_value" : "6.5.17m", "version_affected" : "=" }, { "version_value" : "6.5.18", "version_affected" : "=" }, { "version_value" : "6.5.18f", "version_affected" : "=" }, { "version_value" : "6.5.18m", "version_affected" : "=" }, { "version_value" : "6.5.19", "version_affected" : "=" }, { "version_value" : "6.5.19f", "version_affected" : "=" }, { "version_value" : "6.5.19m", "version_affected" : "=" }, { "version_value" : "6.5.20", "version_affected" : "=" }, { "version_value" : "6.5.20f", "version_affected" : "=" }, { "version_value" : "6.5.20m", "version_affected" : "=" }, { "version_value" : "6.5.21", "version_affected" : "=" }, { "version_value" : "6.5.21f", "version_affected" : "=" }, { "version_value" : "6.5.21m", "version_affected" : "=" }, { "version_value" : "6.5.22", "version_affected" : "=" }, { "version_value" : "6.5_20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P", "name" : "20050402-01-P", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14875", "name" : "14875", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013662", "name" : "1013662", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=225&type=vulnerabilities", "name" : "20050407 SGI IRIX gr_osview File Overwrite Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sgi:irix:6.5_20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0467", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "putty", "product" : { "product_data" : [ { "product_name" : "putty", "version" : { "version_data" : [ { "version_value" : "0.56", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14333", "name" : "14333", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17214", "name" : "17214", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html", "name" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html", "name" : "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml", "name" : "GLSA-200502-28", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities", "name" : "20050221 Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414", "name" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416", "name" : "http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19403", "name" : "putty-sftppktgetstring-bo(19403)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.56" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0468", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ncsa", "product" : { "product_data" : [ { "product_name" : "telnet", "version" : { "version_data" : [ { "version_value" : "c", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc", "name" : "FreeBSD-SA-05:01.telnet", "refsource" : "FREEBSD", "tags" : [ "Vendor Advisory" ] }, { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P", "name" : "20050405-01-P", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962", "name" : "CLA-2005:962", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14745", "name" : "14745", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17899", "name" : "17899", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1", "name" : "101665", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1", "name" : "101671", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1", "name" : "57755", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1", "name" : "57761", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt", "name" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.de/security/2005/dsa-731", "name" : "DSA-731", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-703", "name" : "DSA-703", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities", "name" : "20050328 Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/341908", "name" : "VU#341908", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061", "name" : "MDKSA-2005:061", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html", "name" : "RHSA-2005:327", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html", "name" : "RHSA-2005:330", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12919", "name" : "12919", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntulinux.org/usn/usn-224-1", "name" : "USN-224-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9640", "name" : "oval:org.mitre.oval:def:9640", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncsa:telnet:c:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0469", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ncsa", "product" : { "product_data" : [ { "product_name" : "telnet", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc", "name" : "FreeBSD-SA-05:01.telnet", "refsource" : "FREEBSD", "tags" : [ "Vendor Advisory" ] }, { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P", "name" : "20050405-01-P", "refsource" : "SGI", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14745", "name" : "14745", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17899", "name" : "17899", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1", "name" : "101665", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1", "name" : "101671", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1", "name" : "57755", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1", "name" : "57761", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt", "name" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.de/security/2005/dsa-731", "name" : "DSA-731", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-697", "name" : "DSA-697", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-699", "name" : "DSA-699", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-703", "name" : "DSA-703", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-36.xml", "name" : "GLSA-200503-36", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities", "name" : "20050328 Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/291924", "name" : "VU#291924", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:061", "name" : "MDKSA-2005:061", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-327.html", "name" : "RHSA-2005:327", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-330.html", "name" : "RHSA-2005:330", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12918", "name" : "12918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntulinux.org/usn/usn-224-1", "name" : "USN-224-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9708", "name" : "oval:org.mitre.oval:def:9708", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ncsa:telnet:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0470", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wpa_supplicant", "product" : { "product_data" : [ { "product_name" : "wpa_supplicant", "version" : { "version_data" : [ { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html", "name" : "[HostAP] 20050213 wpa_supplicant - new stable releases v0.3.8 and v0.2.7", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14313", "name" : "14313", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013226", "name" : "1013226", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml", "name" : "GLSA-200502-22", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19357", "name" : "wpasupplicant-bo(19357)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpa_supplicant:wpa_supplicant:0.2.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0471", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/11070/", "name" : "11070", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2004-7/advisory/", "name" : "http://secunia.com/secunia_research/2004-7/advisory/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/544392", "name" : "VU#544392", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19285", "name" : "sun-java-create-files(19285)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0472", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933", "name" : "CLA-2005:933", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://gaim.sourceforge.net/security/index.php?id=10", "name" : "http://gaim.sourceforge.net/security/index.php?id=10", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2", "name" : "20050225 [USN-85-1] Gaim vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14322", "name" : "14322", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-716", "name" : "DSA-716", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml", "name" : "GLSA-200503-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/839280", "name" : "VU#839280", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049", "name" : "MDKSA-2005:049", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html", "name" : "RHSA-2005:215", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-432.html", "name" : "RHSA-2005:432", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12589", "name" : "12589", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19380", "name" : "gaim-snac-dos(19380)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10433", "name" : "oval:org.mitre.oval:def:10433", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0473", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933", "name" : "CLA-2005:933", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://gaim.sourceforge.net/security/index.php?id=11", "name" : "http://gaim.sourceforge.net/security/index.php?id=11", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110935655500670&w=2", "name" : "20050225 [USN-85-1] Gaim vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14322", "name" : "14322", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml", "name" : "GLSA-200503-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/523888", "name" : "VU#523888", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:049", "name" : "MDKSA-2005:049", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-215.html", "name" : "RHSA-2005:215", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12589", "name" : "12589", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19381", "name" : "gaim-html-dos(19381)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10212", "name" : "oval:org.mitre.oval:def:10212", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes \"an invalid memory access,\" a different vulnerability than CVE-2005-0208." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0474", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webcalendar", "product" : { "product_data" : [ { "product_name" : "webcalendar", "version" : { "version_data" : [ { "version_value" : "0.9.45", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868446431706&w=2", "name" : "20050217 [ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14319", "name" : "14319", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013231", "name" : "1013231", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/13918", "name" : "13918", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.scovettalabs.com/advisory/SCL-2005.001.txt", "name" : "http://www.scovettalabs.com/advisory/SCL-2005.001.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19369", "name" : "webcalendar-sql-injection(19369)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webcalendar:webcalendar:0.9.45:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0475", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafaq", "version" : { "version_data" : [ { "version_value" : "beta4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868808723487&w=2", "name" : "20050217 [PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19371", "name" : "pafaq-sql-injection(19371)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafaq:beta4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0476", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hpm_guestbook.cgi", "product" : { "product_data" : [ { "product_name" : "hpm_guestbook.cgi", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110869187805397&w=2", "name" : "20050217 hpm_guestbook.cgi JavaScript-Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19372", "name" : "hpm-guestbook-xss(19372)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hpm_guestbook.cgi:hpm_guestbook.cgi:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0477", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "invision_power_services", "product" : { "product_data" : [ { "product_name" : "invision_power_board", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1_final", "version_affected" : "=" }, { "version_value" : "1.3_final", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110868196922995&w=2", "name" : "20050217 Invision Power Boards 1.3.1 FINAL XSS Exploit", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19399", "name" : "invision-power-board-sml-xss(19399)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0478", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trackercam", "product" : { "product_data" : [ { "product_name" : "trackercam", "version" : { "version_data" : [ { "version_value" : "5.12", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390918", "name" : "20050218 Multiple vulnerabilities in TrackerCam 5.12", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12592", "name" : "12592", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19409", "name" : "trackercam-useragent-bo(19409)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19411", "name" : "trackercam-php-bo(19411)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.12" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0479", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trackercam", "product" : { "product_data" : [ { "product_name" : "trackercam", "version" : { "version_data" : [ { "version_value" : "5.12", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390918", "name" : "20050218 Multiple vulnerabilities in TrackerCam 5.12", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12592", "name" : "12592", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19414", "name" : "trackercam-fn-directory-traversal(19414)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via \"..\" sequences and (1) \"/\" slash), (2) \"\\\" (backslash), or (3) hex-encoded characters in the fn parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.12" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0480", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trackercam", "product" : { "product_data" : [ { "product_name" : "trackercam", "version" : { "version_data" : [ { "version_value" : "5.12", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390918", "name" : "20050218 Multiple vulnerabilities in TrackerCam 5.12", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12592", "name" : "12592", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19416", "name" : "trackercam-xss(19416)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.12" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0481", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trackercam", "product" : { "product_data" : [ { "product_name" : "trackercam", "version" : { "version_data" : [ { "version_value" : "5.12", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390918", "name" : "20050218 Multiple vulnerabilities in TrackerCam 5.12", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12592", "name" : "12592", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19415", "name" : "trackercam-fn-path-disclosure(19415)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.12" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0482", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trackercam", "product" : { "product_data" : [ { "product_name" : "trackercam", "version" : { "version_data" : [ { "version_value" : "5.12", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390918", "name" : "20050218 Multiple vulnerabilities in TrackerCam 5.12", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12592", "name" : "12592", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19417", "name" : "trackercam-contentlength-dos(19417)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.12" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0483", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "glftpd", "product" : { "product_data" : [ { "product_name" : "glftpd", "version" : { "version_data" : [ { "version_value" : "1.26", "version_affected" : "=" }, { "version_value" : "1.27", "version_affected" : "=" }, { "version_value" : "1.28", "version_affected" : "=" }, { "version_value" : "1.29.1", "version_affected" : "=" }, { "version_value" : "1.31", "version_affected" : "=" }, { "version_value" : "1.32", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" }, { "version_value" : "2.0_rc5", "version_affected" : "=" }, { "version_value" : "2.0_rc6", "version_affected" : "=" }, { "version_value" : "2.0_rc7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/390924", "name" : "20050218 Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12586", "name" : "12586", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19401", "name" : "glftpd-sitenfosh-directory-traversal(19401)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing (\"*\") characters in a SITE NFO command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.29.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glftpd:glftpd:2.0_rc7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0484", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gproftpd", "product" : { "product_data" : [ { "product_name" : "gproftpd", "version" : { "version_data" : [ { "version_value" : "8.1.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=81894", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=81894", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-26.xml", "name" : "GLSA-200502-26", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gproftpd:gproftpd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.1.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0485", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phparena", "product" : { "product_data" : [ { "product_name" : "panews", "version" : { "version_data" : [ { "version_value" : "2.0b4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110863062605906&w=2", "name" : "20050216 [PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12576", "name" : "12576", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19359", "name" : "panews-commentphp-xss(19359)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phparena:panews:2.0b4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0486", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tarantella", "product" : { "product_data" : [ { "product_name" : "secure_global_desktop", "version" : { "version_data" : [ { "version_value" : "enterprise_3.42", "version_affected" : "=" }, { "version_value" : "enterprise_4.0", "version_affected" : "=" } ] } }, { "product_name" : "tarantella_enterprise", "version" : { "version_data" : [ { "version_value" : "3.30", "version_affected" : "=" }, { "version_value" : "3.40", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.tarantella.com/security/bulletin-11.html", "name" : "http://www.tarantella.com/security/bulletin-11.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19407", "name" : "tarantella-enterprise-obtain-information(19407)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tarantella:secure_global_desktop:enterprise_3.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tarantella:secure_global_desktop:enterprise_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0487", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kayako", "product" : { "product_data" : [ { "product_name" : "esupport", "version" : { "version_data" : [ { "version_value" : "2.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110845724029888&w=2", "name" : "20050215 Kayako eSupport v2.3.1 Support Tracker XSS", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12563", "name" : "12563", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18571", "name" : "kayako-index-xss(18571)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0488", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "telnet_client", "version" : { "version_data" : [ { "version_value" : "5.1.2600.2180", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mit", "product" : { "product_data" : [ { "product_name" : "kerberos_5", "version" : { "version_data" : [ { "version_value" : "1.3.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://idefense.com/application/poi/display?id=260&type=vulnerabilities", "name" : "20050614 Multiple Vendor Telnet Client Information Disclosure Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html", "name" : "APPLE-SA-2006-08-01", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17135", "name" : "17135", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/21253", "name" : "21253", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1014203", "name" : "1014203", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1", "name" : "101665", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1", "name" : "101671", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1", "name" : "57755", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1", "name" : "57761", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/800829", "name" : "VU#800829", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html", "name" : "SUSE-SR:2005:016", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-504.html", "name" : "RHSA-2005:504", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html", "name" : "RHSA-2005:562", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13940", "name" : "13940", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/19289", "name" : "19289", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html", "name" : "TA06-214A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2006/3101", "name" : "ADV-2006-3101", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11373", "name" : "oval:org.mitre.oval:def:11373", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1139", "name" : "oval:org.mitre.oval:def:1139", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:telnet_client:5.1.2600.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-14T04:00Z", "lastModifiedDate" : "2020-01-21T15:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0489", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes", "name" : "http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/18173", "name" : "18173", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory." }, { "lang" : "en", "value" : "This vulnerability is addressed in the following product release:\r\nLinux, Linux kernel, 2.4.27" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0490", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "curl", "product" : { "product_data" : [ { "product_name" : "curl", "version" : { "version_data" : [ { "version_value" : "7.12.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "libcurl", "product" : { "product_data" : [ { "product_name" : "libcurl", "version" : { "version_data" : [ { "version_value" : "7.12.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940", "name" : "CLA-2005:940", "refsource" : "CONECTIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110959085507755&w=2", "name" : "20050228 [USN-86-1] cURL vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-20.xml", "name" : "GLSA-200503-20", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=202&type=vulnerabilities", "name" : "20050221 Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=203&type=vulnerabilities", "name" : "20050221 Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:048", "name" : "MDKSA-2005:048", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_11_curl.html", "name" : "SUSE-SA:2005:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-340.html", "name" : "RHSA-2005:340", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12615", "name" : "12615", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12616", "name" : "12616", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19423", "name" : "curl-kerberos-bo(19423)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10273", "name" : "oval:org.mitre.oval:def:10273", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:curl:curl:7.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libcurl:libcurl:7.12.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0491", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "knox_software", "product" : { "product_data" : [ { "product_name" : "arkeia_server_backup", "version" : { "version_data" : [ { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.0_rc1", "version_affected" : "=" }, { "version_value" : "5.3.0_rc2", "version_affected" : "=" }, { "version_value" : "5.3.0_rc3", "version_affected" : "=" }, { "version_value" : "5.3.0_rc4", "version_affected" : "=" }, { "version_value" : "5.3.1", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" }, { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110887325425794&w=2", "name" : "20050218 Knox Arkeia remote root/system exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14327", "name" : "14327", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12594", "name" : "12594", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19398", "name" : "arkeia-backup-client-bo(19398)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.0_rc4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia_server_backup:5.3.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0492", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110879063511486&w=2", "name" : "20050218 Adobe Reader invalid root page node Count value DOS", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/14813", "name" : "14813", "refsource" : "SECUNIA", "tags" : [ "Broken Link", "Not Applicable" ] }, { "url" : "http://www.adobe.com/support/techdocs/331468.html", "name" : "http://www.adobe.com/support/techdocs/331468.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0310", "name" : "ADV-2005-0310", "refsource" : "VUPEN", "tags" : [ "Permissions Required" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19946", "name" : "adobe-root-page-node-dos(19946)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0493", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "seth_m._knorr", "product" : { "product_data" : [ { "product_name" : "biz_mail_form", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110876655521321&w=2", "name" : "20050218 BizMail 2.1 Spam Exploit", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter." }, { "lang" : "en", "value" : "Upgrade to newest version." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:seth_m._knorr:biz_mail_form:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "thomson", "product" : { "product_data" : [ { "product_name" : "thomson_cable_modem", "version" : { "version_data" : [ { "version_value" : "tcw690", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110886937131507&w=2", "name" : "20050219 Thomson TCW690 POST Password Validation Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14353", "name" : "14353", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19387", "name" : "thomson-tcw690-gain-access(19387)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:thomson:thomson_cable_modem:tcw690:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0495", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeroboard", "product" : { "product_data" : [ { "product_name" : "zeroboard", "version" : { "version_data" : [ { "version_value" : "4.1_pl2", "version_affected" : "=" }, { "version_value" : "4.1_pl3", "version_affected" : "=" }, { "version_value" : "4.1_pl4", "version_affected" : "=" }, { "version_value" : "4.1_pl5", "version_affected" : "=" }, { "version_value" : "4.1_pl6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110884332105513&w=2", "name" : "20050219 Multiples vulnerability in ZeroBoard,", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013243", "name" : "1013243", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19420", "name" : "zeroboard-xss(19420)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-19T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0496", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "knox_software", "product" : { "product_data" : [ { "product_name" : "arkeia", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110900879826004&w=2", "name" : "20050220 Arkeia Network Backup Client Remote Access", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://metasploit.com/research/arkeia_agent/", "name" : "http://metasploit.com/research/arkeia_agent/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013256", "name" : "1013256", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20667", "name" : "arkeia-backup-client-gain-access(20667)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knox_software:arkeia:5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0497", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adp", "product" : { "product_data" : [ { "product_name" : "elite_system_max_9000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110901051420503&w=2", "name" : "20050219 ADP Elite System Max 9000 Series Login Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20622", "name" : "adp-elite-gain-privileges(20622)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adp:elite_system_max_9000:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0498", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gigafast_ethernet", "product" : { "product_data" : [ { "product_name" : "gigafast_router", "version" : { "version_data" : [ { "version_value" : "ee400-r", "version_affected" : "=" }, { "version_value" : "ee410-r", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2", "name" : "20050220 Gigafast/CompUSA router (model EE400-R) vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19422", "name" : "gigafast-backupcfg-plaintext-password(19422)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee400-r:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee410-r:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0499", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gigafast_ethernet", "product" : { "product_data" : [ { "product_name" : "gigafast_router", "version" : { "version_data" : [ { "version_value" : "ee400-r", "version_affected" : "=" }, { "version_value" : "ee410-r", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110900986022760&w=2", "name" : "20050220 Gigafast/CompUSA router (model EE400-R) vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19426", "name" : "gigafast-dns-queries-dos(19426)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DNS queries." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee400-r:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:gigafast_ethernet:gigafast_router:ee410-r:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-20T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0500", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110895997201027&w=2", "name" : "20050221 WindowsXPSP2 script-initiated popup window", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14335", "name" : "14335", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12602", "name" : "12602", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19452", "name" : "ie-title-bar-spoofing(19452)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0501", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digipen_institute_of_technology", "product" : { "product_data" : [ { "product_name" : "bontago", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/bontagobof-adv.txt", "name" : "http://aluigi.altervista.org/adv/bontagobof-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14350", "name" : "14350", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12603", "name" : "12603", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19406", "name" : "bontago-nickname-bo(19406)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digipen_institute_of_technology:bontago:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0502", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xinkaa_web_station", "product" : { "product_data" : [ { "product_name" : "xinkaa_web_station", "version" : { "version_data" : [ { "version_value" : "1.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/xinkaa-adv.txt", "name" : "http://aluigi.altervista.org/adv/xinkaa-adv.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14349", "name" : "14349", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12606", "name" : "12606", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0189", "name" : "ADV-2005-0189", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19404", "name" : "xinkaa-web-directory-traversal(19404)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\\ characters in an HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xinkaa_web_station:xinkaa_web_station:1.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-18T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0503", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "uim", "product" : { "product_data" : [ { "product_name" : "uim", "version" : { "version_data" : [ { "version_value" : "0.4.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.freedesktop.org/archives/uim/2005-February/000996.html", "name" : "[uim] 20050220 uim 0.4.5.1 released", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/13981", "name" : "13981", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:046", "name" : "MDKSA-2005:046", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12604", "name" : "12604", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uim:uim:0.4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0504", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.15_pre20", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "<=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22", "name" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html", "name" : "20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/20163", "name" : "20163", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/20202", "name" : "20202", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/20338", "name" : "20338", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/26651", "name" : "26651", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/30112", "name" : "30112", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013273", "name" : "1013273", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1067", "name" : "DSA-1067", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1069", "name" : "DSA-1069", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1070", "name" : "DSA-1070", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2006/dsa-1082", "name" : "DSA-1082", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html", "name" : "RHSA-2005:529", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html", "name" : "RHSA-2005:551", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2008-0237.html", "name" : "RHSA-2008:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12195", "name" : "12195", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/usn-508-1", "name" : "USN-508-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770", "name" : "oval:org.mitre.oval:def:9770", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*", "versionEndIncluding" : "2.6.21" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0505", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stackworks_enterprises", "product" : { "product_data" : [ { "product_name" : "information_resource_manager", "version" : { "version_data" : [ { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14342", "name" : "14342", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=306629", "name" : "http://sourceforge.net/project/shownotes.php?release_id=306629", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19419", "name" : "irm-ldap-security-bypass(19419)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have \"potentially serious\" impact, related to LDAP logins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stackworks_enterprises:information_resource_manager:1.5.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-19T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0506", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "avaya", "product" : { "product_data" : [ { "product_name" : "ip_office_phone_manager", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ip_soft_phone", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110909733831694&w=2", "name" : "20050222 Avaya IP Office Phone Manager - Sensitive Information Cleartext", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110910486128709&w=2", "name" : "20050222 Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf", "name" : "http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\\IP400\\Generic." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:ip_office_phone_manager:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:ip_soft_phone:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0507", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gd_software", "product" : { "product_data" : [ { "product_name" : "sd_server", "version" : { "version_data" : [ { "version_value" : "4.0.70", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110910535122762&w=2", "name" : "20050222 SD Server 4.0.70 Directory Traversal Bug", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110901639709476&w=2", "name" : "20050221 SD Server 4.0.70 Directory Traversal Bug", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14365", "name" : "14365", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gdsoftware.dk/", "name" : "http://www.gdsoftware.dk/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gd_software:sd_server:4.0.70:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0508", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14336", "name" : "14336", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12619", "name" : "12619", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://xml.apache.org/batik/#SecurityWarning", "name" : "http://xml.apache.org/batik/#SecurityWarning", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a \"script security issue.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:apache:batik:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:apache:batik:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:apache:batik:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:apache:batik:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0509", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mono", "product" : { "product_data" : [ { "product_name" : "mono", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml", "name" : "http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110867912714913&w=2", "name" : "20050217 XSS vulnerabilty in ASP.Net [with details]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14325", "name" : "14325", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including \">\" and \"<\"." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0510", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fallback-reboot", "product" : { "product_data" : [ { "product_name" : "fallback-reboot", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://dcs.nac.uci.edu/~strombrg/fallback-reboot/", "name" : "http://dcs.nac.uci.edu/~strombrg/fallback-reboot/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14328", "name" : "14328", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fallback-reboot:fallback-reboot:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0511", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jelsoft", "product" : { "product_data" : [ { "product_name" : "vbulletin", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0_beta_2", "version_affected" : "=" }, { "version_value" : "2.0_beta_3", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9_can", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.0_beta_2", "version_affected" : "=" }, { "version_value" : "3.0.0_can4", "version_affected" : "=" }, { "version_value" : "3.0.0_rc4", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0_beta_2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110910899415763&w=2", "name" : "20050222 [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14326", "name" : "14326", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12622", "name" : "12622", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vbulletin.com/forum/showthread.php?postid=819562", "name" : "http://www.vbulletin.com/forum/showthread.php?postid=819562", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "misc.php for vBulletin 3.0.6 and earlier, when \"Add Template Name in HTML Comments\" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_beta_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0512", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mambo", "product" : { "product_data" : [ { "product_name" : "mambo", "version" : { "version_data" : [ { "version_value" : "4.5.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip", "name" : "http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14337", "name" : "14337", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.5.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0513", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pmachine", "product" : { "product_data" : [ { "product_name" : "pmachine_pro", "version" : { "version_data" : [ { "version_value" : "2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110883604531802&w=2", "name" : "20050219 pMachine Pro / pMachine Free Remote Code Execution", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12597", "name" : "12597", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/15473", "name" : "15473", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pmachine:pmachine_pro:2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-19T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0514", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "verity", "product" : { "product_data" : [ { "product_name" : "verity_ultraseek", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html", "name" : "20041223 Cross-Site Scripting - an industry-wide problem", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14367", "name" : "14367", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/716144", "name" : "VU#716144", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mikx.de/index.php?p=6", "name" : "http://www.mikx.de/index.php?p=6", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:verity:verity_ultraseek:5.3.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-22T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0515", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webroot_software", "product" : { "product_data" : [ { "product_name" : "my_firewall_plus", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13577", "name" : "13577", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2004-20/advisory/", "name" : "http://secunia.com/secunia_research/2004-20/advisory/", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12842", "name" : "12842", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.webroot.com/services/mfp_advisory.php", "name" : "http://www.webroot.com/services/mfp_advisory.php", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary files by saving log files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webroot_software:my_firewall_plus:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-18T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0516", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "twiki", "product" : { "product_data" : [ { "product_name" : "imagegalleryplugin", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110918725225288&w=2", "name" : "20050223 Robustness patch for TWiki, vulnerability in ImageGalleryPlugin", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14384", "name" : "14384", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff", "name" : "http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.enyo.de/fw/security/notes/twiki-robustness.html", "name" : "http://www.enyo.de/fw/security/notes/twiki-robustness.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:twiki:imagegalleryplugin:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-23T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0517", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "peerftp_5", "product" : { "product_data" : [ { "product_name" : "peerftp_5", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013263", "name" : "1013263", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:peerftp_5:peerftp_5:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-23T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0518", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "exeem", "product" : { "product_data" : [ { "product_name" : "exeem", "version" : { "version_data" : [ { "version_value" : "0.21", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013266", "name" : "1013266", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:exeem:exeem:0.21:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-23T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0519", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "argosoft", "product" : { "product_data" : [ { "product_name" : "ftp_server", "version" : { "version_data" : [ { "version_value" : "1.4.1.1", "version_affected" : "=" }, { "version_value" : "1.4.1.2", "version_affected" : "=" }, { "version_value" : "1.4.1.3", "version_affected" : "=" }, { "version_value" : "1.4.1.4", "version_affected" : "=" }, { "version_value" : "1.4.1.5", "version_affected" : "=" }, { "version_value" : "1.4.1.6", "version_affected" : "=" }, { "version_value" : "1.4.1.7", "version_affected" : "=" }, { "version_value" : "1.4.1.8", "version_affected" : "=" }, { "version_value" : "1.4.1.9", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2.1", "version_affected" : "=" }, { "version_value" : "1.4.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14172", "name" : "14172", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.argosoft.com/ftpserver/changelist.aspx", "name" : "http://www.argosoft.com/ftpserver/changelist.aspx", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/13614", "name" : "13614", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12487", "name" : "12487", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17939", "name" : "argosoft-ink-file-upload(17939)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-18T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0520", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "argosoft", "product" : { "product_data" : [ { "product_name" : "ftp_server", "version" : { "version_data" : [ { "version_value" : "1.4.1.1", "version_affected" : "=" }, { "version_value" : "1.4.1.2", "version_affected" : "=" }, { "version_value" : "1.4.1.3", "version_affected" : "=" }, { "version_value" : "1.4.1.4", "version_affected" : "=" }, { "version_value" : "1.4.1.5", "version_affected" : "=" }, { "version_value" : "1.4.1.6", "version_affected" : "=" }, { "version_value" : "1.4.1.7", "version_affected" : "=" }, { "version_value" : "1.4.1.8", "version_affected" : "=" }, { "version_value" : "1.4.1.9", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2.1", "version_affected" : "=" }, { "version_value" : "1.4.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14372", "name" : "14372", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.argosoft.com/ftpserver/changelist.aspx", "name" : "http://www.argosoft.com/ftpserver/changelist.aspx", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14061", "name" : "14061", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12632", "name" : "12632", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19442", "name" : "argosoft-site-copy-files(19442)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-23T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0521", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013269", "name" : "1013269", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sendlink:sendlink:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-23T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0522", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lionmax_software", "product" : { "product_data" : [ { "product_name" : "chat_anywhere", "version" : { "version_data" : [ { "version_value" : "2.72a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013270", "name" : "1013270", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lionmax_software:chat_anywhere:2.72a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0523", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "prozilla", "product" : { "product_data" : [ { "product_name" : "prozilla_download_accelerator", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.5.1", "version_affected" : "=" }, { "version_value" : "1.3.5.2", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://deicide.siyahsapka.org/exploits/proz_ex2.c", "name" : "http://deicide.siyahsapka.org/exploits/proz_ex2.c", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-719", "name" : "DSA-719", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.securiteam.com/exploits/5WP082KEUW.html", "name" : "http://www.securiteam.com/exploits/5WP082KEUW.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12635", "name" : "12635", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0524", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php", "product" : { "product_data" : [ { "product_name" : "php", "version" : { "version_data" : [ { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.9", "version_affected" : "=" }, { "version_value" : "4.3.10", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html", "name" : "APPLE-SA-2005-06-08", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14792", "name" : "14792", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013619", "name" : "1013619", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml", "name" : "GLSA-200504-15", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072", "name" : "MDKSA-2005:072", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15183", "name" : "15183", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html", "name" : "RHSA-2005:405", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html", "name" : "RHSA-2005:406", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/394797", "name" : "20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0305", "name" : "ADV-2005-0305", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19920", "name" : "php-phphandleiff-dos(19920)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9310", "name" : "oval:org.mitre.oval:def:9310", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-05-03T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0525", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php", "product" : { "product_data" : [ { "product_name" : "php", "version" : { "version_data" : [ { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.9", "version_affected" : "=" }, { "version_value" : "4.3.10", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html", "name" : "APPLE-SA-2005-06-08", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14792", "name" : "14792", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013619", "name" : "1013619", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-708", "name" : "DSA-708", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2005/dsa-729", "name" : "DSA-729", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml", "name" : "GLSA-200504-15", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072", "name" : "MDKSA-2005:072", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15184", "name" : "15184", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html", "name" : "RHSA-2005:405", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html", "name" : "RHSA-2005:406", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/394797", "name" : "20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities", "refsource" : "IDEFENSE", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0305", "name" : "ADV-2005-0305", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11703", "name" : "oval:org.mitre.oval:def:11703", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-05-03T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0526", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pblang", "product" : { "product_data" : [ { "product_name" : "pblang", "version" : { "version_data" : [ { "version_value" : "4.65", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110917641105486&w=2", "name" : "20050222 Software PBLang 4.65 search.php XSS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110917702708589&w=2", "name" : "20050222 Software PBLang 4.65 pmpshow.php XSS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110917768511595&w=2", "name" : "20050222 Software PBLang 4.65 pm.php XSS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013277", "name" : "1013277", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pmpshow.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0527", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110935267500395&w=2", "name" : "20050225 Firescrolling [Firefox 1.0]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013301", "name" : "1013301", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mikx.de/?p=11", "name" : "http://www.mikx.de/?p=11", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-27.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-27.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031", "name" : "oval:org.mitre.oval:def:100031", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772", "name" : "oval:org.mitre.oval:def:11772", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load \"privileged content\" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka \"Firescrolling.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0528", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0985. Reason: This candidate is a duplicate of CVE-2003-0985. Notes: All CVE users should reference CVE-2003-0985 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0529", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11_rc1_bk6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@4201818eC6aMn0x3GY_9rw3ueb2ZWQ", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@4201818eC6aMn0x3GY_9rw3ueb2ZWQ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2", "name" : "20050215 linux kernel 2.6 fun. windoze is a joke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "name" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8994", "name" : "oval:org.mitre.oval:def:8994", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0530", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11_rc1_bk6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@420181322LZmhPTewcCOLkubGwOL3w", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@420181322LZmhPTewcCOLkubGwOL3w", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2", "name" : "20050215 linux kernel 2.6 fun. windoze is a joke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "name" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10960", "name" : "oval:org.mitre.oval:def:10960", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-19T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0531", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930", "name" : "CLA-2005:930", "refsource" : "CONECTIVA", "tags" : [ "Patch" ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch@4208e1fcfccuD-eH2OGM5mBhihmQ3A", "name" : "http://linux.bkbits.net:8080/linux-2.6/gnupatch@4208e1fcfccuD-eH2OGM5mBhihmQ3A", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2", "name" : "20050215 linux kernel 2.6 fun. windoze is a joke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "name" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10095", "name" : "oval:org.mitre.oval:def:10095", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0532", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@42018227TkNpHlX6BefnItV_GqMmzQ", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@42018227TkNpHlX6BefnItV_GqMmzQ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091402626556&w=2", "name" : "20050315 [USN-95-1] Linux kernel vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110846727602817&w=2", "name" : "20050215 linux kernel 2.6 fun. windoze is a joke", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "name" : "http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0533", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trend_micro", "product" : { "product_data" : [ { "product_name" : "client-server-messaging_suite_smb", "version" : { "version_data" : [ { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "client-server_suite_smb", "version" : { "version_data" : [ { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "control_manager", "version" : { "version_data" : [ { "version_value" : "gold", "version_affected" : "=" }, { "version_value" : "netware", "version_affected" : "=" } ] } }, { "product_name" : "interscan_emanager", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.51", "version_affected" : "=" }, { "version_value" : "3.51_j", "version_affected" : "=" } ] } }, { "product_name" : "interscan_messaging_security_suite", "version" : { "version_data" : [ { "version_value" : "3.81", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "interscan_viruswall", "version" : { "version_data" : [ { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.51", "version_affected" : "=" }, { "version_value" : "3.52", "version_affected" : "=" }, { "version_value" : "3.52_build1466", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "interscan_web_security_suite", "version" : { "version_data" : [ { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "interscan_webmanager", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" } ] } }, { "product_name" : "interscan_webprotect", "version" : { "version_data" : [ { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "officescan", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "corporate_3.0", "version_affected" : "=" }, { "version_value" : "corporate_3.1.1", "version_affected" : "=" }, { "version_value" : "corporate_3.5", "version_affected" : "=" }, { "version_value" : "corporate_3.11", "version_affected" : "=" }, { "version_value" : "corporate_3.13", "version_affected" : "=" }, { "version_value" : "corporate_3.54", "version_affected" : "=" }, { "version_value" : "corporate_5.02", "version_affected" : "=" }, { "version_value" : "corporate_5.5", "version_affected" : "=" }, { "version_value" : "corporate_5.58", "version_affected" : "=" }, { "version_value" : "corporate_6.5", "version_affected" : "=" } ] } }, { "product_name" : "pc-cillin", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } }, { "product_name" : "portalprotect", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "scanmail", "version" : { "version_data" : [ { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.51", "version_affected" : "=" }, { "version_value" : "3.8", "version_affected" : "=" }, { "version_value" : "3.81", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "gold", "version_affected" : "=" } ] } }, { "product_name" : "scanmail_emanager", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "serverprotect", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.25_2007-02-16", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "5.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14396", "name" : "14396", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013289", "name" : "1013289", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013290", "name" : "1013290", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12643", "name" : "12643", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution", "name" : "http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/189", "name" : "20050224 Trend Micro AntiVirus Library Heap Overflow", "refsource" : "ISS", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:client-server-messaging_suite_smb:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:client-server_suite_smb:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:gold:*:as_400:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:gold:*:s_390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:gold:*:solaris:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:gold:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:control_manager:netware:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.5:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.5.2:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.6:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.6:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_emanager:3.51_j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:3.81:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:solaris:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.4:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.5:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:hp_ux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:solaris:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.6.5:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:3.52_build1466:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:5.1:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:aix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:linux_for_smb:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:smb:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_viruswall:gold:*:windows_nt_for_smb:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:solaris:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:gold:*:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_webmanager:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_webmanager:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_webmanager:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:interscan_webprotect:gold:*:isa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:3.0:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.0:*:windows_nt_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.1.1:*:windows_nt_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:windows_nt_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:windows_nt_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:windows_nt_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_3.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_5.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:officescan:corporate_6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:pc-cillin:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:pc-cillin:2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:pc-cillin:2002:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:pc-cillin:2003:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:portalprotect:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:2.6:*:domino:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:2.51:*:domino:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:3.8:*:microsoft_exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:3.81:*:microsoft_exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:6.1:*:microsoft_exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_aix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_as_400:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_s_390:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_solaris:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail:gold:*:lotus_domino_on_windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:scanmail_emanager:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:serverprotect:1.3:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:serverprotect:1.25_2007-02-16:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:serverprotect:2.5:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trend_micro:serverprotect:5.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0534", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.4_beta1", "version_affected" : "=" }, { "version_value" : "1.4_beta2", "version_affected" : "=" }, { "version_value" : "1.4_beta3", "version_affected" : "=" }, { "version_value" : "1.4_beta4", "version_affected" : "=" }, { "version_value" : "1.4_beta5", "version_affected" : "=" }, { "version_value" : "1.4_beta6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14360", "name" : "14360", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013260", "name" : "1013260", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "name" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml", "name" : "GLSA-200502-33", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0535", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14360", "name" : "14360", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013260", "name" : "1013260", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "name" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml", "name" : "GLSA-200502-33", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-22T05:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0536", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.4_beta1", "version_affected" : "=" }, { "version_value" : "1.4_beta2", "version_affected" : "=" }, { "version_value" : "1.4_beta3", "version_affected" : "=" }, { "version_value" : "1.4_beta4", "version_affected" : "=" }, { "version_value" : "1.4_beta5", "version_affected" : "=" }, { "version_value" : "1.4_beta6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14360", "name" : "14360", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013260", "name" : "1013260", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "name" : "http://sourceforge.net/project/shownotes.php?release_id=307067", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml", "name" : "GLSA-200502-33", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0537", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "igeneric", "product" : { "product_data" : [ { "product_name" : "free_shopping_cart", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110910607229970&w=2", "name" : "20050221 [NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14369", "name" : "14369", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013268", "name" : "1013268", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:igeneric:free_shopping_cart:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-21T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0538", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ginp", "product" : { "product_data" : [ { "product_name" : "ginp", "version" : { "version_data" : [ { "version_value" : "0.20", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14373", "name" : "14373", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=307518", "name" : "http://sourceforge.net/project/shownotes.php?release_id=307518", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ginp:ginp:0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ginp:ginp:0.21:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0539", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "hardware_management_console", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14377", "name" : "14377", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html", "name" : "http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:hardware_management_console:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:hardware_management_console:4.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0540", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyclades", "product" : { "product_data" : [ { "product_name" : "alterpath_manager", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2", "name" : "20050224 Cyclades AlterPath Manager Vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14378", "name" : "14378", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cirt.net/advisories/alterpath_disclosure.shtml", "name" : "http://www.cirt.net/advisories/alterpath_disclosure.shtml", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14073", "name" : "14073", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0541", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyclades", "product" : { "product_data" : [ { "product_name" : "alterpath_manager", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2", "name" : "20050224 Cyclades AlterPath Manager Vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14378", "name" : "14378", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cirt.net/advisories/alterpath_console.shtml", "name" : "http://www.cirt.net/advisories/alterpath_console.shtml", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14075", "name" : "14075", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0542", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyclades", "product" : { "product_data" : [ { "product_name" : "alterpath_manager", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110924450827137&w=2", "name" : "20050224 Cyclades AlterPath Manager Vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14378", "name" : "14378", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cirt.net/advisories/alterpath_privesc.shtml", "name" : "http://www.cirt.net/advisories/alterpath_privesc.shtml", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14074", "name" : "14074", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyclades:alterpath_manager:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0543", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.6.0_pl2", "version_affected" : "=" }, { "version_value" : "2.6.0_pl3", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.1_rc1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2", "name" : "20050224 [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/14382", "name" : "14382", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Issue Tracking" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml", "name" : "GLSA-200503-07", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12644", "name" : "12644", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19462", "name" : "phpmyadmin-multiple-php-xss(19462)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-24T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0544", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14382", "name" : "14382", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml", "name" : "GLSA-200503-07", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0545", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110935549821930&w=2", "name" : "20050225 Re: Office 10 applications & flashdrives can be used to browse restricted", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/391332", "name" : "20050223 Office 10 applications & flashdrives can be used to browse restricted drives", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12641", "name" : "12641", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0546", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyrus", "product" : { "product_data" : [ { "product_name" : "imapd", "version" : { "version_data" : [ { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723", "name" : "[info-cyrus] 20050214 Cyrus IMAPd 2.2.11 Released", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=82404", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=82404", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937", "name" : "CLA-2005:937", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110972236203397&w=2", "name" : "20050228 [USN-87-1] Cyrus IMAP server vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14383", "name" : "14383", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200502-29.xml", "name" : "GLSA-200502-29", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013278", "name" : "1013278", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:051", "name" : "MDKSA-2005:051", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-408.html", "name" : "RHSA-2005:408", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/430294/100/0/threaded", "name" : "FLSA:156290", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12636", "name" : "12636", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674", "name" : "oval:org.mitre.oval:def:10674", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in \"cached header handling,\" (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:imapd:2.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:imapd:2.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:imapd:2.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:imapd:2.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyrus:imapd:2.2.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0547", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "hp-ux", "version" : { "version_data" : [ { "version_value" : "11.00", "version_affected" : "=" }, { "version_value" : "11.4", "version_affected" : "=" }, { "version_value" : "11.11", "version_affected" : "=" }, { "version_value" : "11.22", "version_affected" : "=" }, { "version_value" : "11.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110927245211549&w=2", "name" : "SSRT4694", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12651", "name" : "12651", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19467", "name" : "hp-ux-ftpd-gain-access(19467)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5464", "name" : "oval:org.mitre.oval:def:5464", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain \"unauthorized access to files.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-24T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0548", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris_answerbook2", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2", "name" : "20050328 Multiple XSS issues in Sun AnswerBook2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1", "name" : "57737", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1", "name" : "1000230", "refsource" : "SUNALERT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:1.4.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0549", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris_answerbook2", "version" : { "version_data" : [ { "version_value" : "1.4.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111205163531628&w=2", "name" : "20050328 Multiple XSS issues in Sun AnswerBook2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1", "name" : "57737", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1", "name" : "1000230", "refsource" : "SUNALERT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the \"View Log Files\" function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:solaris_answerbook2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0550", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018", "name" : "MS05-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1271", "name" : "oval:org.mitre.oval:def:1271", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2043", "name" : "oval:org.mitre.oval:def:2043", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4397", "name" : "oval:org.mitre.oval:def:4397", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4832", "name" : "oval:org.mitre.oval:def:4832", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka \"Object Management Vulnerability\"." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0551", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=230&type=vulnerabilities", "name" : "20050412 Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018", "name" : "MS05-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822", "name" : "oval:org.mitre.oval:def:1822", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A266", "name" : "oval:org.mitre.oval:def:266", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3544", "name" : "oval:org.mitre.oval:def:3544", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A777", "name" : "oval:org.mitre.oval:def:777", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0553", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14922/", "name" : "14922", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities", "name" : "20050412 Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/774338", "name" : "VU#774338", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020", "name" : "MS05-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19831", "name" : "ie-dhtml-bo(19831)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695", "name" : "oval:org.mitre.oval:def:1695", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100", "name" : "oval:org.mitre.oval:def:3100", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752", "name" : "oval:org.mitre.oval:def:3752", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4874", "name" : "oval:org.mitre.oval:def:4874", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4985", "name" : "oval:org.mitre.oval:def:4985", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka \"DHTML Object Memory Corruption Vulnerability\"." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0554", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14922/", "name" : "14922", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities", "name" : "20050412 Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/756122", "name" : "VU#756122", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020", "name" : "MS05-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1196", "name" : "oval:org.mitre.oval:def:1196", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2253", "name" : "oval:org.mitre.oval:def:2253", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2559", "name" : "oval:org.mitre.oval:def:2559", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3817", "name" : "oval:org.mitre.oval:def:3817", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A789", "name" : "oval:org.mitre.oval:def:789", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka \"URL Parsing Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0555", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14922/", "name" : "14922", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/222050", "name" : "VU#222050", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020", "name" : "MS05-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19842", "name" : "ie-content-advisor-bo(19842)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2077", "name" : "oval:org.mitre.oval:def:2077", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2786", "name" : "oval:org.mitre.oval:def:2786", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3157", "name" : "oval:org.mitre.oval:def:3157", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3926", "name" : "oval:org.mitre.oval:def:3926", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4674", "name" : "oval:org.mitre.oval:def:4674", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka \"Content Advisor Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-12T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0558", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "word", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023", "name" : "MS05-023", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19828", "name" : "word-document-bo(19828)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1236", "name" : "oval:org.mitre.oval:def:1236", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2415", "name" : "oval:org.mitre.oval:def:2415", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2685", "name" : "oval:org.mitre.oval:def:2685", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4234", "name" : "oval:org.mitre.oval:def:4234", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0560", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-787" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111393947713420&w=2", "name" : "20050419 MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/14920/", "name" : "14920", "refsource" : "SECUNIA", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/275193", "name" : "VU#275193", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=15467", "name" : "15467", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/193", "name" : "20050412 Microsoft Exchange Remote Compromise", "refsource" : "ISS", "tags" : [ "Broken Link" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021", "name" : "MS05-021", "refsource" : "MS", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4032", "name" : "oval:org.mitre.oval:def:4032", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2020-04-09T13:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0562", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "msn_messenger", "version" : { "version_data" : [ { "version_value" : "6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14915/", "name" : "14915", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/633446", "name" : "VU#633446", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-102A.html", "name" : "TA05-102A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022", "name" : "MS05-022", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19950", "name" : "msn-messenger-gif-execute-code(19950)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927", "name" : "oval:org.mitre.oval:def:4927", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:msn_messenger:6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-12T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0563", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/15697", "name" : "15697", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=261&type=vulnerabilities", "name" : "20050614 Microsoft Outlook Web Access Cross-Site Scripting Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13952", "name" : "13952", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-029", "name" : "MS05-029", "refsource" : "MS", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL (\"javAsc ript:\") in an IMG tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-14T04:00Z", "lastModifiedDate" : "2020-04-09T13:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0564", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "word", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2002", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities", "name" : "20050712 Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/218621", "name" : "VU#218621", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-193A.html", "name" : "TA05-193A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-035", "name" : "MS05-035", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1190", "name" : "oval:org.mitre.oval:def:1190", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1331", "name" : "oval:org.mitre.oval:def:1331", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-07-12T04:00Z", "lastModifiedDate" : "2018-10-12T21:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0565", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpwebsite", "product" : { "product_data" : [ { "product_name" : "phpwebsite", "version" : { "version_data" : [ { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.2.1", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.3.1", "version_affected" : "=" }, { "version_value" : "0.9.3.2", "version_affected" : "=" }, { "version_value" : "0.9.3.3", "version_affected" : "=" }, { "version_value" : "0.9.3.4", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110928565530828&w=2", "name" : "20050224 phpWebSite-0.10.0_exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14399", "name" : "14399", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013298", "name" : "1013298", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml", "name" : "GLSA-200503-04", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19482", "name" : "phpwebsite-announce-execute-code(19482)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0566", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kmint21_software", "product" : { "product_data" : [ { "product_name" : "golden_ftp_server", "version" : { "version_data" : [ { "version_value" : "1.00b", "version_affected" : "=" }, { "version_value" : "1.20b", "version_affected" : "=" }, { "version_value" : "1.30b", "version_affected" : "=" }, { "version_value" : "1.31b", "version_affected" : "=" }, { "version_value" : "2.02b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031098.html", "name" : "20050122 several BO's in goldenftpd", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/13966/", "name" : "13966", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012973", "name" : "1012973", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.goldenftpserver.com", "name" : "http://www.goldenftpserver.com", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/620862", "name" : "VU#620862", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12333", "name" : "12333", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19015", "name" : "golden-ftp-rnto-bo(19015)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.00b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.20b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.30b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.31b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.02b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-22T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0567", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110929725801154&w=2", "name" : "20050224 [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14382/", "name" : "14382", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1", "name" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12645", "name" : "12645", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19465", "name" : "phpmyadmin-file-include(19465)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0568", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "raven_software", "product" : { "product_data" : [ { "product_name" : "soldier_of_fortune_2", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110927288423807&w=2", "name" : "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13289", "name" : "13289", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013291", "name" : "1013291", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12650", "name" : "12650", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0569", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "punbb", "product" : { "product_data" : [ { "product_name" : "punbb", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2", "name" : "20050224 Multiple vulns in punBB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14394", "name" : "14394", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14538", "name" : "14538", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt", "name" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12652", "name" : "12652", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19473", "name" : "punbb-multiple-sql-injection(19473)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0570", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "punbb", "product" : { "product_data" : [ { "product_name" : "punbb", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2", "name" : "20050224 Multiple vulns in punBB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14394", "name" : "14394", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12652", "name" : "12652", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19483", "name" : "punbb-profile-dos(19483)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0571", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "punbb", "product" : { "product_data" : [ { "product_name" : "punbb", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110927754230666&w=2", "name" : "20050224 Multiple vulns in punBB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14394", "name" : "14394", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt", "name" : "http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch", "name" : "http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19478", "name" : "punbb-file-disclosure(19478)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0572", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpwebsite", "product" : { "product_data" : [ { "product_name" : "phpwebsite", "version" : { "version_data" : [ { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.2.1", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.3.1", "version_affected" : "=" }, { "version_value" : "0.9.3.2", "version_affected" : "=" }, { "version_value" : "0.9.3.3", "version_affected" : "=" }, { "version_value" : "0.9.3.4", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110935172116369&w=2", "name" : "20050225 phpWebSite 0.10.0 Full Path disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://neossecurity.net/Advisories/Advisory-05.txt", "name" : "http://neossecurity.net/Advisories/Advisory-05.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml", "name" : "GLSA-200503-04", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19480", "name" : "phpwebsite-search-path-disclosure(19480)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0573", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=110928380421841&w=2", "name" : "20050224 GAIM exploit", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013300", "name" : "1013300", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains \"(\" or \")\" (parenthesis) characters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0574", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cupidsystems", "product" : { "product_data" : [ { "product_name" : "cis_webserver", "version" : { "version_data" : [ { "version_value" : "3.5.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/391560", "name" : "20050225 CIS WebServer Directory Traversal Bug", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12662", "name" : "12662", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cupidsystems:cis_webserver:3.5.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0575", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stormy_studios", "product" : { "product_data" : [ { "product_name" : "knet", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4b", "version_affected" : "=" }, { "version_value" : "1.4c", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110943766505666&w=2", "name" : "20050225 Knet <= 1.04c Buffer Overflow Bug", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14400", "name" : "14400", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/24897", "name" : "24897", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/24950", "name" : "24950", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12671", "name" : "12671", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stormy_studios:knet:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stormy_studios:knet:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stormy_studios:knet:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stormy_studios:knet:1.4b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stormy_studios:knet:1.4c:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0576", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14381", "name" : "14381", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57738-1", "name" : "57738", "refsource" : "SUNALERT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12656", "name" : "12656", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0577", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dna", "product" : { "product_data" : [ { "product_name" : "mkbold-mkitalic", "version" : { "version_data" : [ { "version_value" : "0.06_1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14398", "name" : "14398", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.freshports.org/x11-fonts/mkbold-mkitalic/", "name" : "http://www.freshports.org/x11-fonts/mkbold-mkitalic/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html", "name" : "http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dna:mkbold-mkitalic:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.06_1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0578", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-28.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-28.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10954", "name" : "oval:org.mitre.oval:def:10954", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freenx", "product" : { "product_data" : [ { "product_name" : "freenx", "version" : { "version_data" : [ { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" }, { "version_value" : "0.2.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html", "name" : "[FreeNX-kNX] 20050217 Security: Serious bug in authority handling found and fixed", "refsource" : "MLIST", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.linuxcompatible.org/story42495.html", "name" : "SUSE-SR:2005:006", "refsource" : "SUSE", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freenx:freenx:0.2.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-25T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0580", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "krzysztof_dabrowski", "product" : { "product_data" : [ { "product_name" : "cmd5checkpw", "version" : { "version_data" : [ { "version_value" : "0.20", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" }, { "version_value" : "0.22", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://security.gentoo.org/glsa/glsa-200502-30.xml", "name" : "GLSA-200502-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.22:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-25T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0581", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "license_software", "version" : { "version_data" : [ { "version_value" : "0.1.0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2", "name" : "20050302 License Patches Are Now Available To Address Buffer Overflows", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "name" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities", "name" : "20050302 Computer Associates License Client and Server Invalid Command Buffer Overflow", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities", "name" : "20050302 Computer Associates License Client/Server GETCONFIG Buffer Overflow", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities", "name" : "20050302 Computer Associates License Client/Server GCR Network Buffer Overflow", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities", "name" : "20050302 Computer Associates License Client/Server GCR Checksum Buffer Overflow", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:license_software:0.1.0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0582", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "license_software", "version" : { "version_data" : [ { "version_value" : "0.1.0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2", "name" : "20050302 License Patches Are Now Available To Address Buffer Overflows", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "name" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=211&type=vulnerabilities", "name" : "20050302 Computer Associates License Client PUTOLF Buffer Overflow", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:license_software:0.1.0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0583", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "license_software", "version" : { "version_data" : [ { "version_value" : "0.1.0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110979326828704&w=2", "name" : "20050302 License Patches Are Now Available To Address Buffer Overflows", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "name" : "http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities", "name" : "20050302 Computer Associates License Client PUTOLF Directory Traversal", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:license_software:0.1.0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0584", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-24.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-24.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277574", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277574", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034", "name" : "oval:org.mitre.oval:def:100034", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191", "name" : "oval:org.mitre.oval:def:11191", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0585", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13599", "name" : "13599", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2004-15/advisory/", "name" : "http://secunia.com/secunia_research/2004-15/advisory/", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-23.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-23.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035", "name" : "oval:org.mitre.oval:def:100035", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924", "name" : "oval:org.mitre.oval:def:9924", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-25T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0586", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13258", "name" : "13258", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-22.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-22.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100036", "name" : "oval:org.mitre.oval:def:100036", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11152", "name" : "oval:org.mitre.oval:def:11152", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0587", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-21.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-21.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037", "name" : "oval:org.mitre.oval:def:100037", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-25T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0588", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-20.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-20.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271209", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271209", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100038", "name" : "oval:org.mitre.oval:def:100038", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10682", "name" : "oval:org.mitre.oval:def:10682", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0589", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-19.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-19.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=270697", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=270697", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039", "name" : "oval:org.mitre.oval:def:100039", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10825", "name" : "oval:org.mitre.oval:def:10825", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0590", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-17.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-17.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268059", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268059", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041", "name" : "oval:org.mitre.oval:def:100041", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010", "name" : "oval:org.mitre.oval:def:10010", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long \"user:pass\" sequence in the URL, which appears before the real hostname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0591", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110547286002188&w=2", "name" : "20050111 Firespoofing [Firefox 1.0]", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13786", "name" : "13786", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mikx.de/firespoofing/", "name" : "http://www.mikx.de/firespoofing/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.mikx.de/index.php?p=7", "name" : "http://www.mikx.de/index.php?p=7", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-16.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-16.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12234", "name" : "12234", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=260560", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=260560", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18864", "name" : "web-browser-modal-spoofing(18864)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042", "name" : "oval:org.mitre.oval:def:100042", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039", "name" : "oval:org.mitre.oval:def:10039", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka \"Firespoofing.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0592", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-15.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-15.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=241440", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=241440", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043", "name" : "oval:org.mitre.oval:def:100043", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606", "name" : "oval:org.mitre.oval:def:10606", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-25T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0593", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml", "name" : "GLSA-200503-10", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml", "name" : "GLSA-200503-30", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-14.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-14.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-176.html", "name" : "RHSA-2005:176", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12659", "name" : "12659", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=258048", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=258048", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268483", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=268483", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=276720", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=276720", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277564", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=277564", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100044", "name" : "oval:org.mitre.oval:def:100044", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9533", "name" : "oval:org.mitre.oval:def:9533", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL \"secure site\" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-04T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0594", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html", "name" : "APPLE-SA-2005-05-03", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/354486", "name" : "VU#354486", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-136A.html", "name" : "TA05-136A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-04T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0595", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "working_resources_inc.", "product" : { "product_data" : [ { "product_name" : "badblue", "version" : { "version_data" : [ { "version_value" : "2.55", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0599.html", "name" : "20050226 Badblue HTTP Server, ext.dll buffer overflow", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://secunia.com/advisories/14405", "name" : "14405", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12673", "name" : "12673", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:working_resources_inc.:badblue:2.55:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0596", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php", "product" : { "product_data" : [ { "product_name" : "php", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.linuxcompatible.org/story42495.html", "name" : "SUSE-SR:2005:006", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12665", "name" : "12665", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0597", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_and_content_networking_software", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.0.17.5", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.1.11.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14395", "name" : "14395", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml", "name" : "20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12648", "name" : "12648", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19466", "name" : "cisco-tcp-acns-dos(19466)", "refsource" : "XF", "tags" : [ "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a \"crafted TCP connection.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0", "versionEndExcluding" : "5.0.17.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.1", "versionEndExcluding" : "5.1.11.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-09-26T15:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0598", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_and_content_networking_software", "version" : { "version_data" : [ { "version_value" : "(acns)", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.9", "version_affected" : "=" }, { "version_value" : "4.2.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" } ] } }, { "product_name" : "content_delivery_manager", "version" : { "version_data" : [ { "version_value" : "4630", "version_affected" : "=" }, { "version_value" : "4650", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4630", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4650", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4670", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_engine", "version" : { "version_data" : [ { "version_value" : "507", "version_affected" : "=" }, { "version_value" : "507_2.2_.0", "version_affected" : "=" }, { "version_value" : "507_3.1", "version_affected" : "=" }, { "version_value" : "507_4.0", "version_affected" : "=" }, { "version_value" : "507_4.1", "version_affected" : "=" }, { "version_value" : "510", "version_affected" : "=" }, { "version_value" : "560", "version_affected" : "=" }, { "version_value" : "560_2.2_.0", "version_affected" : "=" }, { "version_value" : "560_3.1", "version_affected" : "=" }, { "version_value" : "560_4.0", "version_affected" : "=" }, { "version_value" : "560_4.1", "version_affected" : "=" }, { "version_value" : "565", "version_affected" : "=" }, { "version_value" : "590", "version_affected" : "=" }, { "version_value" : "590_2.2_.0", "version_affected" : "=" }, { "version_value" : "590_3.1", "version_affected" : "=" }, { "version_value" : "590_4.0", "version_affected" : "=" }, { "version_value" : "590_4.1", "version_affected" : "=" }, { "version_value" : "7320", "version_affected" : "=" }, { "version_value" : "7320_2.2_.0", "version_affected" : "=" }, { "version_value" : "7320_3.1", "version_affected" : "=" }, { "version_value" : "7320_4.0", "version_affected" : "=" }, { "version_value" : "7320_4.1", "version_affected" : "=" }, { "version_value" : "7325", "version_affected" : "=" } ] } }, { "product_name" : "content_engine_module_for_cisco_router", "version" : { "version_data" : [ { "version_value" : "2600_series", "version_affected" : "=" }, { "version_value" : "2800_series", "version_affected" : "=" }, { "version_value" : "3600_series", "version_affected" : "=" }, { "version_value" : "3700_series", "version_affected" : "=" }, { "version_value" : "3800_series", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_content_delivery_network_software", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_router_4430", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_router_4450", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14395", "name" : "14395", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml", "name" : "20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/579240", "name" : "VU#579240", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12648", "name" : "12648", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19469", "name" : "cisco-realserver-realsubscriber-dos(19469)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:\\(acns\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_delivery_manager:4630:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_delivery_manager:4650:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:510:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:565:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7325:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2600_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2800_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3600_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3700_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3800_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_router_4450:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-24T05:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0599", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_and_content_networking_software", "version" : { "version_data" : [ { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.9", "version_affected" : "=" }, { "version_value" : "4.2.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.1.11.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14395", "name" : "14395", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml", "name" : "20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12648", "name" : "12648", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19468", "name" : "cisco-ip-packet-dos(19468)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.11.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0600", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_and_content_networking_software", "version" : { "version_data" : [ { "version_value" : "(acns)", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.9", "version_affected" : "=" }, { "version_value" : "4.2.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" } ] } }, { "product_name" : "content_delivery_manager", "version" : { "version_data" : [ { "version_value" : "4630", "version_affected" : "=" }, { "version_value" : "4650", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4630", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4650", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_distribution_manager_4670", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_engine", "version" : { "version_data" : [ { "version_value" : "507", "version_affected" : "=" }, { "version_value" : "507_2.2_.0", "version_affected" : "=" }, { "version_value" : "507_3.1", "version_affected" : "=" }, { "version_value" : "507_4.0", "version_affected" : "=" }, { "version_value" : "507_4.1", "version_affected" : "=" }, { "version_value" : "510", "version_affected" : "=" }, { "version_value" : "560", "version_affected" : "=" }, { "version_value" : "560_2.2_.0", "version_affected" : "=" }, { "version_value" : "560_3.1", "version_affected" : "=" }, { "version_value" : "560_4.0", "version_affected" : "=" }, { "version_value" : "560_4.1", "version_affected" : "=" }, { "version_value" : "565", "version_affected" : "=" }, { "version_value" : "590", "version_affected" : "=" }, { "version_value" : "590_2.2_.0", "version_affected" : "=" }, { "version_value" : "590_3.1", "version_affected" : "=" }, { "version_value" : "590_4.0", "version_affected" : "=" }, { "version_value" : "590_4.1", "version_affected" : "=" }, { "version_value" : "7320", "version_affected" : "=" }, { "version_value" : "7320_2.2_.0", "version_affected" : "=" }, { "version_value" : "7320_3.1", "version_affected" : "=" }, { "version_value" : "7320_4.0", "version_affected" : "=" }, { "version_value" : "7320_4.1", "version_affected" : "=" }, { "version_value" : "7325", "version_affected" : "=" } ] } }, { "product_name" : "content_engine_module_for_cisco_router", "version" : { "version_data" : [ { "version_value" : "2600_series", "version_affected" : "=" }, { "version_value" : "2800_series", "version_affected" : "=" }, { "version_value" : "3600_series", "version_affected" : "=" }, { "version_value" : "3700_series", "version_affected" : "=" }, { "version_value" : "3800_series", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_content_delivery_network_software", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" } ] } }, { "product_name" : "content_router_4430", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "content_router_4450", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14395", "name" : "14395", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml", "name" : "20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12648", "name" : "12648", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19470", "name" : "cisco-acns-dos(19470)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via \"crafted IP packets\" that are continuously forwarded." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:\\(acns\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_delivery_manager:4630:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_delivery_manager:4650:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:510:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:565:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine:7325:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2600_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:2800_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3600_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3700_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:content_engine_module_for_cisco_router:3800_series:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:content_router_4450:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-24T05:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0601", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_and_content_networking_software", "version" : { "version_data" : [ { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.9", "version_affected" : "=" }, { "version_value" : "4.2.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14395", "name" : "14395", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml", "name" : "20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12648", "name" : "12648", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19471", "name" : "cisco-acns-gain-access(19471)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_and_content_networking_software:5.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0602", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "info-zip", "product" : { "product_data" : [ { "product_name" : "unzip", "version" : { "version_data" : [ { "version_value" : "5.50", "version_affected" : "=" }, { "version_value" : "5.51", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110960796331943&w=2", "name" : "20050228 7a69Adv#22 - UNIX unzip keep setuid and setgid files", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17045", "name" : "17045", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17342", "name" : "17342", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/27684", "name" : "27684", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1", "name" : "103150", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1", "name" : "200844", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.info-zip.org/FAQ.html", "name" : "http://www.info-zip.org/FAQ.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:197", "name" : "MDKSA-2005:197", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14447", "name" : "14447", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trustix.org/errata/2005/0053/", "name" : "2005-0053", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2007/3866", "name" : "ADV-2007-3866", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:info-zip:unzip:5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.51" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0603", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.6c", "version_affected" : "=" }, { "version_value" : "2.0.6d", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.7a", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.8a", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0_beta1", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110943646112950&w=2", "name" : "20050225 -==phpBB 2.0.12 Full path disclosure==-", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://neossecurity.net/Advisories/Advisory-06.txt", "name" : "http://neossecurity.net/Advisories/Advisory-06.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14413", "name" : "14413", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563", "name" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0604", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gfi", "product" : { "product_data" : [ { "product_name" : "languard_network_security_scanner", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110961644621528&w=2", "name" : "20050228 [Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.hat-squad.com/en/000160.html", "name" : "http://www.hat-squad.com/en/000160.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gfi:languard_network_security_scanner:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0605", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lesstif", "product" : { "product_data" : [ { "product_name" : "lesstif", "version" : { "version_data" : [ { "version_value" : "0.93.94", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "x.org", "product" : { "product_data" : [ { "product_name" : "x11r6", "version" : { "version_data" : [ { "version_value" : "6.7.0", "version_affected" : "=" }, { "version_value" : "6.8", "version_affected" : "=" }, { "version_value" : "6.8.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "xfree86_project", "product" : { "product_data" : [ { "product_name" : "x11r6", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2.11", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.11", "version_affected" : "=" }, { "version_value" : "4.1.12", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.0.1", "version_affected" : "=" }, { "version_value" : "4.3.0.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mandrakesoft", "product" : { "product_data" : [ { "product_name" : "mandrake_linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" } ] } }, { "product_name" : "mandrake_linux_corporate_server", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_2.0", "version_affected" : "=" }, { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt", "name" : "SCOSA-2006.5", "refsource" : "SCO", "tags" : [ ] }, { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt", "name" : "SCOSA-2005.57", "refsource" : "SCO", "tags" : [ ] }, { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U", "name" : "20060403-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83598", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83598", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83655", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83655", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html", "name" : "APPLE-SA-2005-08-17", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html", "name" : "APPLE-SA-2005-08-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14460", "name" : "14460", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18049", "name" : "18049", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18316", "name" : "18316", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/19624", "name" : "19624", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-08.xml", "name" : "GLSA-200503-08", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013339", "name" : "1013339", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-723", "name" : "DSA-723", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml", "name" : "GLSA-200503-15", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html", "name" : "FLSA-2006:152803", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-044.html", "name" : "RHSA-2005:044", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-198.html", "name" : "RHSA-2005:198", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-331.html", "name" : "RHSA-2005:331", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-412.html", "name" : "RHSA-2005:412", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-473.html", "name" : "RHSA-2005:473", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html", "name" : "RHSA-2008:0261", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12714", "name" : "12714", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugs.freedesktop.org/attachment.cgi?id=1909", "name" : "https://bugs.freedesktop.org/attachment.cgi?id=1909", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411", "name" : "oval:org.mitre.oval:def:10411", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/92-1/", "name" : "USN-92-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/97-1/", "name" : "USN-97-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lesstif:lesstif:0.93.94:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0606", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "devellion", "product" : { "product_data" : [ { "product_name" : "cubecart", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html", "name" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14416", "name" : "14416", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013304", "name" : "1013304", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032", "name" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12658", "name" : "12658", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20637", "name" : "cubecart-multiple-xss(20637)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0607", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "devellion", "product" : { "product_data" : [ { "product_name" : "cubecart", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html", "name" : "http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013304", "name" : "1013304", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032", "name" : "http://www.cubecart.com/site/forums/index.php?showtopic=6032", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20638", "name" : "cubecart-multiple-path-disclosure(20638)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0608", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webmod", "product" : { "product_data" : [ { "product_name" : "webmod", "version" : { "version_data" : [ { "version_value" : "0.47", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://djeyl.net/forum/index.php?showtopic=41440", "name" : "http://djeyl.net/forum/index.php?showtopic=41440", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14302", "name" : "14302", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webmod:webmod:0.47:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0609", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0610", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14903", "name" : "14903", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13106", "name" : "13106", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html", "name" : "http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0611", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "helix_player", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110979465912834&w=2", "name" : "20050302 RealOne Player / Real .WAV Heap Overflow File Format Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=vulnwatch&m=110977858619314&w=2", "name" : "20050302 RealOne Player / Real .WAV Heap Overflow File Format Vulnerability", "refsource" : "VULNWATCH", "tags" : [ ] }, { "url" : "http://service.real.com/help/faq/security/050224_player/EN/", "name" : "http://service.real.com/help/faq/security/050224_player/EN/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-265.html", "name" : "RHSA-2005:265", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-271.html", "name" : "RHSA-2005:271", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11419", "name" : "oval:org.mitre.oval:def:11419", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0612", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ipvc-3510-mcu", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3520-gw-2b", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3520-gw-2b2v", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3520-gw-2v", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3520-gw-4v", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3525-gw-1p", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ipvc-3530-vta", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14122", "name" : "14122", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013067", "name" : "1013067", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml", "name" : "20050202 Default SNMP Community Strings in Cisco IP/VC Products", "refsource" : "CISCO", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12424", "name" : "12424", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3510-mcu:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3520-gw-2b:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3520-gw-2b2v:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3520-gw-2v:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3520-gw-4v:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3525-gw-1p:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ipvc-3530-vta:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0613", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fckeditor", "product" : { "product_data" : [ { "product_name" : "fckeditor", "version" : { "version_data" : [ { "version_value" : "2.0_rc2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12676", "name" : "12676", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0614", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.6c", "version_affected" : "=" }, { "version_value" : "2.0.6d", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.7a", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.8a", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0_beta1", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110970201920206&w=2", "name" : "20050301 phpBB <= 2.0.12 UID Exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110999268130739&w=2", "name" : "20050304 phpBB 2.0.12 Session Handling Administrator Authentication Bypass", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14413", "name" : "14413", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563", "name" : "http://www.phpbb.com/phpBB/viewtopic.php?t=267563", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0615", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postnuke_software_foundation", "product" : { "product_data" : [ { "product_name" : "postnuke", "version" : { "version_data" : [ { "version_value" : "0.760_rc2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110962819232255&w=2", "name" : "20050228 [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://news.postnuke.com/Article2669.html", "name" : "http://news.postnuke.com/Article2669.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013324", "name" : "1013324", "refsource" : "SECTRACK", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0616", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110962768300373&w=2", "name" : "20050228 [SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://news.postnuke.com/Article2669.html", "name" : "http://news.postnuke.com/Article2669.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013324", "name" : "1013324", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.750:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.760_rc2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0617", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postnuke_software_foundation", "product" : { "product_data" : [ { "product_name" : "postnuke", "version" : { "version_data" : [ { "version_value" : "0.750", "version_affected" : "=" }, { "version_value" : "0.760_rc2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110962710805864&w=2", "name" : "20050228 [SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://news.postnuke.com/Article2669.html", "name" : "http://news.postnuke.com/Article2669.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013324", "name" : "1013324", "refsource" : "SECTRACK", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.750:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0618", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nexland", "product" : { "product_data" : [ { "product_name" : "pro800turbo", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "firewall_vpn_appliance_200r", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "gateway_security_360", "version" : { "version_data" : [ { "version_value" : "857", "version_affected" : "<=" } ] } }, { "product_name" : "gateway_security_460", "version" : { "version_data" : [ { "version_value" : "857", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14428", "name" : "14428", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html", "name" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nexland:pro800turbo:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*", "versionEndIncluding" : "857" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:symantec:gateway_security_460:*:*:*:*:*:*:*:*", "versionEndIncluding" : "857" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0619", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bfriendly.com", "product" : { "product_data" : [ { "product_name" : "einstein", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14455", "name" : "14455", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013316", "name" : "1013316", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14212", "name" : "14212", "refsource" : "OSVDB", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.exploit-db.com/exploits/846", "name" : "846", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bfriendly.com:einstein:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2017-10-19T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0620", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bfriendly.com", "product" : { "product_data" : [ { "product_name" : "einstein", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14455", "name" : "14455", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bfriendly.com:einstein:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0621", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "enlight_software", "product" : { "product_data" : [ { "product_name" : "scrapland", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/scrapboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/scrapboom-adv.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=110961578504928&w=2", "name" : "20050228 Server termination in Scrapland 1.0", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14435", "name" : "14435", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a \"newpos\" value that is less than or equal to a size value, or (4) partial packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enlight_software:scrapland:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0622", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "raidenhttpd", "product" : { "product_data" : [ { "product_name" : "raidenhttpd", "version" : { "version_data" : [ { "version_value" : "1.1.32", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2", "name" : "20050301 [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14453", "name" : "14453", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html", "name" : "http://www.security.org.sg/vuln/raidenhttpd1132.html", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.32:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0623", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "raidenhttpd", "product" : { "product_data" : [ { "product_name" : "raidenhttpd", "version" : { "version_data" : [ { "version_value" : "1.1.32", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110969702013313&w=2", "name" : "20050301 [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14453", "name" : "14453", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.security.org.sg/vuln/raidenhttpd1132.html", "name" : "http://www.security.org.sg/vuln/raidenhttpd1132.html", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.32:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0624", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "reportbug", "version" : { "version_data" : [ { "version_value" : "2.60", "version_affected" : "=" }, { "version_value" : "2.61", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2", "name" : "20050228 [USN-88-1] reportbug information disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14422/", "name" : "14422", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600", "name" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19504", "name" : "reportbug-file-world-readable(19504)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:reportbug:2.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:reportbug:2.61:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0625", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "reportbug", "version" : { "version_data" : [ { "version_value" : "2.60", "version_affected" : "=" }, { "version_value" : "2.61", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110972153627388&w=2", "name" : "20050228 [USN-88-1] reportbug information disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14422/", "name" : "14422", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600", "name" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6600", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6717", "name" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=6717", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19520", "name" : "reportbug-smtppasswd-information-disclosure(19520)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:reportbug:2.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:reportbug:2.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:reportbug:3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-28T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0626", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html", "name" : "RHSA-2005:415", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12716", "name" : "12716", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie", "name" : "http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19581", "name" : "squid-set-cookie-race-condition(19581)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11169", "name" : "oval:org.mitre.oval:def:11169", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/93-1/", "name" : "USN-93-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0627", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trolltech", "product" : { "product_data" : [ { "product_name" : "qt", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=75181", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=75181", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-01.xml", "name" : "GLSA-200503-01", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12695", "name" : "12695", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trolltech:qt:3.3.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0628", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "demof", "product" : { "product_data" : [ { "product_name" : "forumwa", "version" : { "version_data" : [ { "version_value" : "v1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110971101826900&w=2", "name" : "20050301 Forumwa search.php xss vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14418", "name" : "14418", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12689", "name" : "12689", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:demof:forumwa:v1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0629", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "427bb", "product" : { "product_data" : [ { "product_name" : "fourtwosevenbb", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110970474726113&w=2", "name" : "20050301 427BB profile.php XSS vulnerability.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110970911514167&w=2", "name" : "20050301 427BB profile.php XSS vulnerability.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14434", "name" : "14434", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013337", "name" : "1013337", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12693", "name" : "12693", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19546", "name" : "427bb-profile-xss(19546)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0630", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pblang", "product" : { "product_data" : [ { "product_name" : "pblang", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.56_4.5_rc2", "version_affected" : "=" }, { "version_value" : "4.63", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110971002211589&w=2", "name" : "20050301 Software PBLang 4.63 sendpm.php reply file read vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1", "name" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12690", "name" : "12690", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19544", "name" : "pblang-sendpm-obtain-information(19544)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.56_4.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.63:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0631", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pblang", "product" : { "product_data" : [ { "product_name" : "pblang", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.56_4.5_rc2", "version_affected" : "=" }, { "version_value" : "4.63", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110970738214608&w=2", "name" : "20050301 Software PBLang 4.63 delpm.php authentication vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1", "name" : "http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12694", "name" : "12694", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19552", "name" : "pblang-delpm-delete-messages(19552)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the \"id\" and \"a\" parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.56_4.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pblang:pblang:4.63:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0632", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpnews", "product" : { "product_data" : [ { "product_name" : "phpnews", "version" : { "version_data" : [ { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110971663824719&w=2", "name" : "20050301 PHP News <= 1.2.4 - Remote File Inclusion (VXSfx)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110989169008570&w=2", "name" : "20050303 PHP News <= 1.2.4 - Remote File Inclusion Exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14449", "name" : "14449", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013345", "name" : "1013345", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12696", "name" : "12696", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpnews:phpnews:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpnews:phpnews:1.2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-01T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0633", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cerulean_studios", "product" : { "product_data" : [ { "product_name" : "trillian", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "trillian_pro", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111023000624809&w=2", "name" : "20050306 See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securiteam.com/exploits/5KP030KF5E.html", "name" : "http://www.securiteam.com/exploits/5KP030KF5E.html", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12703", "name" : "12703", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0221", "name" : "ADV-2005-0221", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0634", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kmint21_software", "product" : { "product_data" : [ { "product_name" : "golden_ftp_server", "version" : { "version_data" : [ { "version_value" : "1.92", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://retrogod.altervista.org/golden_heap.html", "name" : "http://retrogod.altervista.org/golden_heap.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/23323", "name" : "23323", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/391987", "name" : "20050302 Golden Ftp server 1.29 Username remote Buffer Overflow", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12704", "name" : "12704", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2006/4936", "name" : "ADV-2006-4936", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.92:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0635", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "foxmail", "product" : { "product_data" : [ { "product_name" : "foxmail_email_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14145", "name" : "14145", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013356", "name" : "1013356", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/391960", "name" : "20050302 Foxmail server \"USER\" command Multiple remote buffer overflow", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12711", "name" : "12711", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0636", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "foxmail", "product" : { "product_data" : [ { "product_name" : "foxmail_email_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14145", "name" : "14145", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013356", "name" : "1013356", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/391960", "name" : "20050302 Foxmail server \"USER\" command Multiple remote buffer overflow", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12711", "name" : "12711", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:foxmail:foxmail_email_server:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0637", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openbsd", "product" : { "product_data" : [ { "product_name" : "openbsd", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14432", "name" : "14432", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013333", "name" : "1013333", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.openbsd.org/errata.html#copy", "name" : "20050228 011: SECURITY FIX: February 28, 2005 i386 only", "refsource" : "OPENBSD", "tags" : [ ] }, { "url" : "http://www.openbsd.org/errata35.html#locore", "name" : "20050228 028: SECURITY FIX: February 28, 2005", "refsource" : "OPENBSD", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12825", "name" : "12825", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19531", "name" : "openbsd-copy-functions(19531)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0638", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xli", "product" : { "product_data" : [ { "product_name" : "xli", "version" : { "version_data" : [ { "version_value" : "1.14", "version_affected" : "=" }, { "version_value" : "1.15", "version_affected" : "=" }, { "version_value" : "1.16", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=79762", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14459", "name" : "14459", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14462", "name" : "14462", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml", "name" : "GLSA-200503-05", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf", "name" : "http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-695", "name" : "DSA-695", "refsource" : "DEBIAN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14365", "name" : "14365", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-332.html", "name" : "RHSA-2005:332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/433935/30/5010/threaded", "name" : "FLSA-2006:152923", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12712", "name" : "12712", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898", "name" : "oval:org.mitre.oval:def:10898", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.17:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0639", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xli", "product" : { "product_data" : [ { "product_name" : "xli", "version" : { "version_data" : [ { "version_value" : "1.14", "version_affected" : "=" }, { "version_value" : "1.15", "version_affected" : "=" }, { "version_value" : "1.16", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=79762", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=79762", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14459", "name" : "14459", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-05.xml", "name" : "GLSA-200503-05", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-695", "name" : "DSA-695", "refsource" : "DEBIAN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via \"buffer management errors\" from certain image properties, some of which may be related to integer overflows in PPM files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xli:xli:1.17:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0640", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "unicenter_asset_management", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14454", "name" : "14454", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "name" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the \"Change Credentials for Database\" window, which allows local users to recover the SQL Admin password via certain methods." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0641", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "unicenter_asset_management", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14454", "name" : "14454", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "name" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to inject arbitrary HTML or web script via the (1) name or (2) description in a report template." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-02T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0642", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "unicenter_asset_management", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14454", "name" : "14454", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "name" : "http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:unicenter_asset_management:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0643", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcafee", "product" : { "product_data" : [ { "product_name" : "antivirus_engine", "version" : { "version_data" : [ { "version_value" : "4.3.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf", "name" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14628", "name" : "14628", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/10243", "name" : "10243", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0644", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcafee", "product" : { "product_data" : [ { "product_name" : "antivirus_engine", "version" : { "version_data" : [ { "version_value" : "4.3.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf", "name" : "http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14628", "name" : "14628", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013463", "name" : "1013463", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/361180", "name" : "VU#361180", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/10243", "name" : "10243", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12832", "name" : "12832", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://xforce.iss.net/xforce/alerts/id/190", "name" : "20050317 McAfee AntiVirus Library Stack Overflow", "refsource" : "ISS", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0645", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2", "name" : "20050301 Kernelpanik Labs Digest 2005-2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt", "name" : "http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0646", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "panews", "version" : { "version_data" : [ { "version_value" : "2.0.4b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2", "name" : "20050301 Kernelpanik Labs Digest 2005-2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt", "name" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:panews:2.0.4b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0647", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "panews", "version" : { "version_data" : [ { "version_value" : "2.0.4b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110969774502370&w=2", "name" : "20050301 Kernelpanik Labs Digest 2005-2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt", "name" : "http://www.kernelpanik.org/docs/kernelpanik/panews.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:panews:2.0.4b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0648", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pixel-apes_group", "product" : { "product_data" : [ { "product_name" : "safehtml", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://pixel-apes.com/safehtml/feed", "name" : "http://pixel-apes.com/safehtml/feed", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013315", "name" : "1013315", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) \"decimal HTML entities\" or (2) \"the \\x00 symbol.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pixel-apes_group:safehtml:1.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0649", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pixel-apes_group", "product" : { "product_data" : [ { "product_name" : "safehtml", "version" : { "version_data" : [ { "version_value" : "1.2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://pixel-apes.com/safehtml/feed", "name" : "http://pixel-apes.com/safehtml/feed", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13869", "name" : "13869", "refsource" : "SECUNIA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via \"hexadecimal HTML entities.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pixel-apes_group:safehtml:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.2.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0650", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "projectbb", "product" : { "product_data" : [ { "product_name" : "projectbb", "version" : { "version_data" : [ { "version_value" : "0.4.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2", "name" : "20050308 failles dans ProjectBB v0.4.5.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14533", "name" : "14533", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013332", "name" : "1013332", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12709", "name" : "12709", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0223", "name" : "ADV-2005-0223", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19556", "name" : "projectbb-multiple-xss(19556)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as \"drivers.php\" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:projectbb:projectbb:0.4.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0651", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "projectbb", "product" : { "product_data" : [ { "product_name" : "projectbb", "version" : { "version_data" : [ { "version_value" : "0.4.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111031893610270&w=2", "name" : "20050308 failles dans ProjectBB v0.4.5.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14533", "name" : "14533", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013332", "name" : "1013332", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12710", "name" : "12710", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0223", "name" : "ADV-2005-0223", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19557", "name" : "projectbb-mulitple-sql-injection(19557)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as \"drivers.php\" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:projectbb:projectbb:0.4.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0652", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "openvms", "version" : { "version_data" : [ { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3-1", "version_affected" : "=" }, { "version_value" : "7.3-2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110980700101451&w=2", "name" : "SSRT4866", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14444", "name" : "14444", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19566", "name" : "openvms-gain-access(19566)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:openvms:6.2:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:openvms:6.2:*:vax:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:openvms:7.3:*:vax:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:openvms:7.3-1:*:alpha:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:openvms:7.3-2:*:alpha:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0653", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83792", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83792", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml", "name" : "GLSA-200503-07", "refsource" : "GENTOO", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0654", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "the_gimp_team", "product" : { "product_data" : [ { "product_name" : "gimp", "version" : { "version_data" : [ { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110995346018830&w=2", "name" : "20050304 GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_gimp_team:gimp:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_gimp_team:gimp:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_gimp_team:gimp:2.2.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0655", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arif_supriyanto", "product" : { "product_data" : [ { "product_name" : "auracms", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt", "name" : "http://echo.or.id/adv/adv011-y3dips-2005.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2", "name" : "20050302 Vulnerabilities in Aura CMS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013357", "name" : "1013357", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arif_supriyanto:auracms:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0656", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arif_supriyanto", "product" : { "product_data" : [ { "product_name" : "auracms", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://echo.or.id/adv/adv011-y3dips-2005.txt", "name" : "http://echo.or.id/adv/adv011-y3dips-2005.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110979842315750&w=2", "name" : "20050302 Vulnerabilities in Aura CMS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14458", "name" : "14458", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013357", "name" : "1013357", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arif_supriyanto:auracms:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0657", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "computalynx", "product" : { "product_data" : [ { "product_name" : "cproxy", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110980096304013&w=2", "name" : "20050302 Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14461", "name" : "14461", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19573", "name" : "computalynx-cproxy-directory-traversal(19573)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19574", "name" : "computalynx-cproxy-get-dos(19574)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:computalynx:cproxy:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:computalynx:cproxy:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:computalynx:cproxy:3.4.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0658", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cmw_linklist", "product" : { "product_data" : [ { "product_name" : "cmw_linklist", "version" : { "version_data" : [ { "version_value" : "1.4.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110987892618892&w=2", "name" : "20050303 TYPO3 SQL Injection vunerabilitie", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110995289619649&w=2", "name" : "20050304 RE: TYPO3 SQL Injection vunerabilitie", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=110996536620069&w=2", "name" : "20050304 Re: TYPO3 SQL Injection vunerabilitie", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14465", "name" : "14465", "refsource" : "SECUNIA", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cmw_linklist:cmw_linklist:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0659", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.6c", "version_affected" : "=" }, { "version_value" : "2.0.6d", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.7a", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.8a", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0_beta1", "version_affected" : "=" }, { "version_value" : "2.0_rc1", "version_affected" : "=" }, { "version_value" : "2.0_rc2", "version_affected" : "=" }, { "version_value" : "2.0_rc3", "version_affected" : "=" }, { "version_value" : "2.0_rc4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110996579900134&w=2", "name" : "20050304 -==phpBB 2.0.13 Full path disclosure==-", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://neosecurityteam.net/Advisories/Advisory-09.txt", "name" : "http://neosecurityteam.net/Advisories/Advisory-09.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=9", "name" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013377", "name" : "1013377", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0660", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adalis", "product" : { "product_data" : [ { "product_name" : "d-forum", "version" : { "version_data" : [ { "version_value" : "1.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14464", "name" : "14464", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013349", "name" : "1013349", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adalis:d-forum:1.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0661", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "woltlab", "product" : { "product_data" : [ { "product_name" : "burning_board", "version" : { "version_data" : [ { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14450", "name" : "14450", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013351", "name" : "1013351", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:woltlab:burning_board:2.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0662", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14414", "name" : "14414", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/14308", "name" : "14308", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0663", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard", "version" : { "version_data" : [ { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14414", "name" : "14414", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/14308", "name" : "14308", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19051", "name" : "mercuryboard-index-sql-injection(19051)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0664", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libexif", "product" : { "product_data" : [ { "product_name" : "libexif", "version" : { "version_data" : [ { "version_value" : "0.6.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/17705", "name" : "17705", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013398", "name" : "1013398", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1", "name" : "102041", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-709", "name" : "DSA-709", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml", "name" : "GLSA-200503-17", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:064", "name" : "MDKSA-2005:064", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-300.html", "name" : "RHSA-2005:300", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0240", "name" : "ADV-2005-0240", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/2565", "name" : "ADV-2005-2565", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=7152", "name" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=7152", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832", "name" : "oval:org.mitre.oval:def:10832", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/91-1/", "name" : "USN-91-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexif:libexif:0.6.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0665", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "john_bradley", "product" : { "product_data" : [ { "product_name" : "xv", "version" : { "version_data" : [ { "version_value" : "3.10a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83686", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83686", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml", "name" : "GLSA-200503-09", "refsource" : "GENTOO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:john_bradley:xv:3.10a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0666", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "the_pax_team", "product" : { "product_data" : [ { "product_name" : "pax_linux", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14489", "name" : "14489", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/392348", "name" : "20050305 PaX privilege elevation security bug", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12729", "name" : "12729", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0667", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sylpheed", "product" : { "product_data" : [ { "product_name" : "sylpheed", "version" : { "version_data" : [ { "version_value" : "0.8.11", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.10", "version_affected" : "=" }, { "version_value" : "0.9.11", "version_affected" : "=" }, { "version_value" : "0.9.12", "version_affected" : "=" }, { "version_value" : "0.9.99", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sylpheed-claws", "product" : { "product_data" : [ { "product_name" : "sylpheed-claws", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_3.0", "version_affected" : "=" } ] } }, { "product_name" : "linux_advanced_workstation", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14491", "name" : "14491", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013376", "name" : "1013376", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sylpheed.good-day.net/changelog.html.en", "name" : "http://sylpheed.good-day.net/changelog.html.en", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sylpheed.good-day.net/changelog-devel.html.en", "name" : "http://sylpheed.good-day.net/changelog-devel.html.en", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-26.xml", "name" : "GLSA-200503-26", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-303.html", "name" : "RHSA-2005:303", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.8.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:1.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0668", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "christian_hilgers", "product" : { "product_data" : [ { "product_name" : "http_anti_virus_proxy_(havp)", "version" : { "version_data" : [ { "version_value" : "0.50", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013370", "name" : "1013370", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.bemberg.de/server-side/index.htm", "name" : "http://www.bemberg.de/server-side/index.htm", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:christian_hilgers:http_anti_virus_proxy_\\(havp\\):*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.50" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-04T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0669", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://forums.phpcoin.com/index.php?showtopic=4101", "name" : "http://forums.phpcoin.com/index.php?showtopic=4101", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://forums.phpcoin.com/index.php?showtopic=4116", "name" : "http://forums.phpcoin.com/index.php?showtopic=4116", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://forums.phpcoin.com/index.php?showtopic=4118", "name" : "http://forums.phpcoin.com/index.php?showtopic=4118", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html", "name" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14439", "name" : "14439", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://securitytracker.com/id?1013329", "name" : "1013329", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12686", "name" : "12686", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19571", "name" : "phpcoin-id-sql-injection(19571)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0670", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://forums.phpcoin.com/index.php?showtopic=4101", "name" : "http://forums.phpcoin.com/index.php?showtopic=4101", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://forums.phpcoin.com/index.php?showtopic=4116", "name" : "http://forums.phpcoin.com/index.php?showtopic=4116", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://forums.phpcoin.com/index.php?showtopic=4118", "name" : "http://forums.phpcoin.com/index.php?showtopic=4118", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html", "name" : "http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14439", "name" : "14439", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://securitytracker.com/id?1013329", "name" : "1013329", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12686", "name" : "12686", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19572", "name" : "phpcoin-xss(19572)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0671", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca3de", "product" : { "product_data" : [ { "product_name" : "ca3de", "version" : { "version_data" : [ { "version_value" : "march_2004", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt", "name" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14483", "name" : "14483", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013361", "name" : "1013361", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12727", "name" : "12727", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca3de:ca3de:*:*:*:*:*:*:*:*", "versionEndIncluding" : "march_2004" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-03T05:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0672", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca3de", "product" : { "product_data" : [ { "product_name" : "ca3de", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt", "name" : "http://aluigi.altervista.org/adv/ca3dex-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14483", "name" : "14483", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013361", "name" : "1013361", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12727", "name" : "12727", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca3de:ca3de:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0673", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "2.0.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=8", "name" : "http://neosecurityteam.tk/index.php?pagina=advisories&id=8", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14475", "name" : "14475", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013362", "name" : "1013362", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0674", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pabox", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110987537431541&w=2", "name" : "20050303 [XSS] paBox 1.6", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14474", "name" : "14474", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013363", "name" : "1013363", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12719", "name" : "12719", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pabox:1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-03T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0675", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpoutsourcing", "product" : { "product_data" : [ { "product_name" : "zorum", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/9497", "name" : "9497", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013365", "name" : "1013365", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpoutsourcing:zorum:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpoutsourcing:zorum:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0676", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpoutsourcing", "product" : { "product_data" : [ { "product_name" : "zorum", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013365", "name" : "1013365", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-04T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0677", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpoutsourcing", "product" : { "product_data" : [ { "product_name" : "zorum", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013365", "name" : "1013365", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0678", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stadtaus", "product" : { "product_data" : [ { "product_name" : "form_mail_script", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110996489800035&w=2", "name" : "20050304 PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14505", "name" : "14505", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013378", "name" : "1013378", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.stadtaus.com/forum/t-1579.html", "name" : "http://www.stadtaus.com/forum/t-1579.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stadtaus:form_mail_script:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0679", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stadtaus", "product" : { "product_data" : [ { "product_name" : "tell_a_friend_script", "version" : { "version_data" : [ { "version_value" : "2.7", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/", "name" : "http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013390", "name" : "1013390", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/14628", "name" : "14628", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/474954/100/0/threaded", "name" : "20070727 Friend Script 2.5 - 2.4 Remote File İnclude", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.stadtaus.com/forum/t-1578.html", "name" : "http://www.stadtaus.com/forum/t-1578.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.stadtaus.com/forum/t-1579.html", "name" : "http://www.stadtaus.com/forum/t-1579.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19630", "name" : "tellafriend-scriptroot-file-include(19630)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. NOTE: it was later reported that 2.4 is also affected." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stadtaus:tell_a_friend_script:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.7" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0680", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=110996056601719&w=2", "name" : "20050304 Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14513", "name" : "14513", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.stadtaus.com/forum/p-5895.html", "name" : "http://www.stadtaus.com/forum/p-5895.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.stadtaus.com/forum/t-1579.html", "name" : "http://www.stadtaus.com/forum/t-1579.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:stadtaus:download_center_lite:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0681", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nokia", "product" : { "product_data" : [ { "product_name" : "series", "version" : { "version_data" : [ { "version_value" : "60", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013380", "name" : "1013380", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14574", "name" : "14574", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securiteam.com/securitynews/5PP0V00G1S.html", "name" : "http://www.securiteam.com/securitynews/5PP0V00G1S.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12743", "name" : "12743", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19594", "name" : "nokia-symbian-dos(19594)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nokia:series:60:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-06T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0682", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "drupal", "product" : { "product_data" : [ { "product_name" : "drupal", "version" : { "version_data" : [ { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/drupal-4.5.2", "name" : "http://drupal.org/drupal-4.5.2", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupal.org/files/drupal-4.5-xss-fix.patch", "name" : "http://drupal.org/files/drupal-4.5-xss-fix.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14515", "name" : "14515", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0683", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0659. Reason: This candidate is a duplicate of CVE-2005-0659. Notes: All CVE users should reference CVE-2005-0659 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0684", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "maxdb", "version" : { "version_data" : [ { "version_value" : "7.5.00", "version_affected" : "=" }, { "version_value" : "7.5.00.08", "version_affected" : "=" }, { "version_value" : "7.5.00.11", "version_affected" : "=" }, { "version_value" : "7.5.00.12", "version_affected" : "=" }, { "version_value" : "7.5.00.14", "version_affected" : "=" }, { "version_value" : "7.5.00.15", "version_affected" : "=" }, { "version_value" : "7.5.00.16", "version_affected" : "=" }, { "version_value" : "7.5.00.18", "version_affected" : "=" }, { "version_value" : "7.5.00.19", "version_affected" : "=" }, { "version_value" : "7.5.00.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV", "name" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities", "name" : "20050425 MySQL MaxDB Webtool Remote Stack Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities", "name" : "20050425 MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13368", "name" : "13368", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent (\"%\") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:maxdb:7.5.00.23:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-25T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0685", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "outstart", "product" : { "product_data" : [ { "product_name" : "participate_enterprise", "version" : { "version_data" : [ { "version_value" : "3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14542", "name" : "14542", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.honour.ca/outstartpsi.txt", "name" : "http://security.honour.ca/outstartpsi.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/392623", "name" : "20050308 PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12752", "name" : "12752", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19632", "name" : "pe-access-validation-dos(19632)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:outstart:participate_enterprise:3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0686", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mlterm", "product" : { "product_data" : [ { "product_name" : "mlterm", "version" : { "version_data" : [ { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-13.xml", "name" : "GLSA-200503-13", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://sourceforge.net/project/shownotes.php?release_id=310416", "name" : "https://sourceforge.net/project/shownotes.php?release_id=310416", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mlterm:mlterm:2.9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0687", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hashcash", "product" : { "product_data" : [ { "product_name" : "hashcash", "version" : { "version_data" : [ { "version_value" : "1.14", "version_affected" : "=" }, { "version_value" : "1.15", "version_affected" : "=" }, { "version_value" : "1.16", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=83541", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=83541", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14487", "name" : "14487", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-12.xml", "name" : "GLSA-200503-12", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-06T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0688", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111005099504081&w=2", "name" : "20050305 Windows Server 2003 and XP SP2 LAND attack vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/22341", "name" : "22341", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded", "name" : "SSRT061264", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2006/3983", "name" : "ADV-2006-3983", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019", "name" : "MS05-019", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064", "name" : "MS06-064", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1288", "name" : "oval:org.mitre.oval:def:1288", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1685", "name" : "oval:org.mitre.oval:def:1685", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A482", "name" : "oval:org.mitre.oval:def:482", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978", "name" : "oval:org.mitre.oval:def:4978", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the \"Land\" vulnerability (CVE-1999-0016)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-05T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0689", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jimmy", "product" : { "product_data" : [ { "product_name" : "the_includer", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111021730710779&w=2", "name" : "20050307 Remote Command Execution", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111030957413411&w=2", "name" : "20050308 Re: Remote Command Execution", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12738", "name" : "12738", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jimmy:the_includer:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jimmy:the_includer:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0690", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gene6", "product" : { "product_data" : [ { "product_name" : "g6_ftp_server", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111022496826680&w=2", "name" : "20050307 Gene6 FTP Server Local Privilege Escalation Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111026585431080&w=2", "name" : "20050308 Re: Gene6 FTP Server Local Privilege Escalation Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14436", "name" : "14436", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secway.org/Advisory/ad20050303.txt", "name" : "http://secway.org/Advisory/ad20050303.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12739", "name" : "12739", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gene6:g6_ftp_server:3.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0691", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "socialmpn", "product" : { "product_data" : [ { "product_name" : "socialmpn", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111022633903239&w=2", "name" : "20050307 Remote Testing SocialMPN Remote File Inclusion by y3dips", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://waraxe.us/ftopic-542-0-days0-orderasc-.html", "name" : "http://waraxe.us/ftopic-542-0-days0-orderasc-.html", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:socialmpn:socialmpn:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:socialmpn:socialmpn:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:socialmpn:socialmpn:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:socialmpn:socialmpn:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:socialmpn:socialmpn:1.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-06T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0692", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_fusion", "product" : { "product_data" : [ { "product_name" : "php_fusion", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111022851900028&w=2", "name" : "20050306 PHP-FUSION 5.* XSS VULNERABILITY", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14492", "name" : "14492", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.php-fusion.co.uk/news.php?readmore=183", "name" : "http://www.php-fusion.co.uk/news.php?readmore=183", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_fusion:php_fusion:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-06T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0693", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jowood_productions", "product" : { "product_data" : [ { "product_name" : "chaser", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.50", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/chasercool-adv.txt", "name" : "http://aluigi.altervista.org/adv/chasercool-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12733", "name" : "12733", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jowood_productions:chaser:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jowood_productions:chaser:1.50:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0694", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hosting_controller", "product" : { "product_data" : [ { "product_name" : "hosting_controller", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4b", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1_hotfix_1.4", "version_affected" : "=" }, { "version_value" : "6.1_hotfix_1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://isun.shabgard.org/hc2.txt", "name" : "http://isun.shabgard.org/hc2.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2", "name" : "20050307 Hosting Controller Multiple Unauthenticated information disclose", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14522", "name" : "14522", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0695", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hosting_controller", "product" : { "product_data" : [ { "product_name" : "hosting_controller", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4b", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1_hotfix_1.4", "version_affected" : "=" }, { "version_value" : "6.1_hotfix_1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://isun.shabgard.org/hc2.txt", "name" : "http://isun.shabgard.org/hc2.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111026083314947&w=2", "name" : "20050307 Hosting Controller Multiple Unauthenticated information disclose", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14522", "name" : "14522", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the \"login ID\" field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0696", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "argosoft", "product" : { "product_data" : [ { "product_name" : "ftp_server", "version" : { "version_data" : [ { "version_value" : "1.4.2.8", "version_affected" : "=" }, { "version_value" : "1.4.2.29", "version_affected" : "=" }, { "version_value" : "1.4.3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042523.html", "name" : "20060225 ArGoSoft FTP server remote heap overflow", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14526", "name" : "14526", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securityreason.com/securityalert/494", "name" : "494", "refsource" : "SREASON", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1015681", "name" : "1015681", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/392653", "name" : "20050308 ArGoSoft FTP Server 1.4.2.8 Buffer Overflow", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/426081/100/0/threaded", "name" : "20060225 ArGoSoft FTP server remote heap overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12755", "name" : "12755", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://www.securinfos.info/english/security-advisories-alerts/20060225_ArGoSoft.FTP.Server_Heap.Overflow.html", "name" : "https://www.securinfos.info/english/security-advisories-alerts/20060225_ArGoSoft.FTP.Server_Heap.Overflow.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:argosoft:ftp_server:1.4.3.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0697", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "brt", "product" : { "product_data" : [ { "product_name" : "copperexport", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14401", "name" : "14401", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.zzamboni.org/copperexport/", "name" : "http://www.zzamboni.org/copperexport/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or (3) keywords parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:brt:copperexport:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:brt:copperexport:0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0698", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jason_hines", "product" : { "product_data" : [ { "product_name" : "phpweblog", "version" : { "version_data" : [ { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/392552", "name" : "20050307 phpWebLog <= 0.5.3 arbitrary file inclusion (VXSfx)", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12747", "name" : "12747", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jason_hines:phpweblog:0.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jason_hines:phpweblog:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jason_hines:phpweblog:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jason_hines:phpweblog:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jason_hines:phpweblog:0.5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0699", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.10.5", "version_affected" : "=" }, { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" }, { "version_value" : "0.10.9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "altlinux", "product" : { "product_data" : [ { "product_name" : "alt_linux", "version" : { "version_data" : [ { "version_value" : "compact_2.3", "version_affected" : "=" }, { "version_value" : "junior_2.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "linux_advanced_workstation", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111038641832400&w=2", "name" : "20050309 RE: Ethereal remote buffer overflow - addon", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111083125521813&w=2", "name" : "20050314 Ethereal 0.10.9 and below remote root exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04", "name" : "http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html", "name" : "RHSA-2005:306", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/392659", "name" : "20050308 Ethereal remote buffer overflow", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12759", "name" : "12759", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10147", "name" : "oval:org.mitre.oval:def:10147", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:compact_2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:altlinux:alt_linux:junior_2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0700", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "aztek_forum", "product" : { "product_data" : [ { "product_name" : "aztek_forum", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.frsirt.com/exploits/20050307.aztek.c.php", "name" : "http://www.frsirt.com/exploits/20050307.aztek.c.php", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12745", "name" : "12745", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0701", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032273.html", "name" : "20050307 - Argeniss - Oracle Database Server Directory transversal", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111023635928211&w=2", "name" : "20050307 - Argeniss - Oracle Database Server Directory transversal", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.argeniss.com/research/ARGENISS-ADV-030501.txt", "name" : "http://www.argeniss.com/research/ARGENISS-ADV-030501.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via \"\\\\.\\\\..\" (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0702", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyfaq", "product" : { "product_data" : [ { "product_name" : "phpmyfaq", "version" : { "version_data" : [ { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4_alpha1", "version_affected" : "=" }, { "version_value" : "1.4_alpha2", "version_affected" : "=" }, { "version_value" : "1.4a", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14516", "name" : "14516", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.phpmyfaq.de/advisory_2005-03-06.php", "name" : "http://www.phpmyfaq.de/advisory_2005-03-06.php", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.4a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0703", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xerox", "product" : { "product_data" : [ { "product_name" : "workcentre_165", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "7.47.30.000", "version_affected" : "=" }, { "version_value" : "7.47.33.008", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_175", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "7.47.30.000", "version_affected" : "=" }, { "version_value" : "7.47.33.008", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_2128", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.001.04.044", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_2636", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.001.04.044", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_32_color", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.001.00.060", "version_affected" : "=" }, { "version_value" : "0.001.02.081", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_35", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "3.028.11.000", "version_affected" : "=" }, { "version_value" : "3.97.20.032", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_3545", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.001.04.044", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_40_color", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.001.00.060", "version_affected" : "=" }, { "version_value" : "0.001.02.081", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_45", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "3.028.11.000", "version_affected" : "=" }, { "version_value" : "3.97.20.032", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_55", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "3.028.11.000", "version_affected" : "=" }, { "version_value" : "3.97.20.032", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_65", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "1.001.00.060", "version_affected" : "=" }, { "version_value" : "1.001.02.084", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_75", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "1.001.00.060", "version_affected" : "=" }, { "version_value" : "1.001.02.084", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_90", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "1.001.00.060", "version_affected" : "=" }, { "version_value" : "1.001.02.084", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_m165", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "6.47.30.000", "version_affected" : "=" }, { "version_value" : "6.47.33.008", "version_affected" : "=" }, { "version_value" : "8.47.30.000", "version_affected" : "=" }, { "version_value" : "8.47.33.008", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_m175", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "6.47.30.000", "version_affected" : "=" }, { "version_value" : "6.47.33.008", "version_affected" : "=" }, { "version_value" : "8.47.30.000", "version_affected" : "=" }, { "version_value" : "8.47.33.008", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_m35", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "2.28.11.000", "version_affected" : "=" }, { "version_value" : "2.97.20.032", "version_affected" : "=" }, { "version_value" : "4.84.16.000", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_m45", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "2.28.11.000", "version_affected" : "=" }, { "version_value" : "2.97.20.032", "version_affected" : "=" }, { "version_value" : "4.84.16.000", "version_affected" : "=" } ] } }, { "product_name" : "workcentre_m55", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "2.28.11.000", "version_affected" : "=" }, { "version_value" : "2.97.20.032", "version_affected" : "=" }, { "version_value" : "4.84.16.000", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14507", "name" : "14507", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf", "name" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an \"unauthenticated account,\" which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_165:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_165:7.47.30.000:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_165:7.47.33.008:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_175:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_175:7.47.30.000:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_175:7.47.33.008:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_2128:*:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_2128:0.001.04.044:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_2636:*:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_2636:0.001.04.044:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_32_color:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_32_color:0.001.00.060:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_32_color:0.001.02.081:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_35:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_35:3.028.11.000:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_35:3.97.20.032:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_3545:*:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_3545:0.001.04.044:*:pro_color:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_40_color:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_40_color:0.001.00.060:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_40_color:0.001.02.081:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_45:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_45:3.028.11.000:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_45:3.97.20.032:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_55:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_55:3.028.11.000:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_55:3.97.20.032:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_65:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_65:1.001.00.060:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_65:1.001.02.084:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_75:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_75:1.001.00.060:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_75:1.001.02.084:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_90:*:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_90:1.001.00.060:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_90:1.001.02.084:*:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m165:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m165:6.47.30.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m165:6.47.33.008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m165:8.47.30.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m165:8.47.33.008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m175:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m175:6.47.30.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m175:6.47.33.008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m175:8.47.30.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m175:8.47.33.008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m35:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m35:2.28.11.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m35:2.97.20.032:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m35:4.84.16.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m45:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m45:2.28.11.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m45:2.97.20.032:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m45:4.84.16.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m55:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m55:2.28.11.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m55:2.97.20.032:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:xerox:workcentre_m55:4.84.16.000:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0704", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" }, { "version_value" : "0.10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html", "name" : "RHSA-2005:306", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12762", "name" : "12762", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10447", "name" : "oval:org.mitre.oval:def:10447", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0705", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.7", "version_affected" : "=" }, { "version_value" : "0.10.8", "version_affected" : "=" }, { "version_value" : "0.10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html", "name" : "RHSA-2005:306", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12762", "name" : "12762", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10565", "name" : "oval:org.mitre.oval:def:10565", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the \"ignore cipher bit\" option enabled. allows remote attackers to cause a denial of service (application crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0706", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "grip", "product" : { "product_data" : [ { "product_name" : "grip", "version" : { "version_data" : [ { "version_value" : "2.9.6", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html", "name" : "http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/32803", "name" : "32803", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/33389", "name" : "33389", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/33824", "name" : "33824", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-21.xml", "name" : "GLSA-200503-21", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714", "name" : "http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-304.html", "name" : "RHSA-2005:304", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2009-0005.html", "name" : "RHSA-2009:0005", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12770", "name" : "12770", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152919", "name" : "FLSA:152919", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19648", "name" : "grip-cddb-bo(19648)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10768", "name" : "oval:org.mitre.oval:def:10768", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00429.html", "name" : "FEDORA-2008-9604", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00490.html", "name" : "FEDORA-2008-9521", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00188.html", "name" : "FEDORA-2008-11956", "refsource" : "FEDORA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grip:grip:2.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grip:grip:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grip:grip:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grip:grip:3.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0707", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ipswitch", "product" : { "product_data" : [ { "product_name" : "ipswitch_collaboration_suite", "version" : { "version_data" : [ { "version_value" : "8.15", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14546", "name" : "14546", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013410", "name" : "1013410", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=216&type=vulnerabilities", "name" : "20050310 Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12780", "name" : "12780", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19655", "name" : "ipswitch-imail-imapexamine-bo(19655)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.15" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0708", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dragonflybsd", "product" : { "product_data" : [ { "product_name" : "dragonflybsd", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc", "name" : "FreeBSD-SA-05:02", "refsource" : "FREEBSD", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0709", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "3.23.49", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.5a", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html", "name" : "20050310 Mysql CREATE FUNCTION libc arbitrary code execution.", "refsource" : "VULNWATCH", "tags" : [ "Exploit" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html", "name" : "APPLE-SA-2005-08-17", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html", "name" : "APPLE-SA-2005-08-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111066115808506&w=2", "name" : "20050310 Mysql CREATE FUNCTION libc arbitrary code execution.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1", "name" : "101864", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-707", "name" : "DSA-707", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml", "name" : "GLSA-200503-19", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060", "name" : "MDKSA-2005:060", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html", "name" : "SUSE-SA:2005:019", "refsource" : "SUSE", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html", "name" : "RHSA-2005:334", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html", "name" : "RHSA-2005:348", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12781", "name" : "12781", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.trustix.org/errata/2005/0009/", "name" : "2005-0009", "refsource" : "TRUSTIX", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479", "name" : "oval:org.mitre.oval:def:10479", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/96-1/", "name" : "USN-96-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-12-17T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0710", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "3.23.49", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.5a", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0083.html", "name" : "20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection", "refsource" : "VULNWATCH", "tags" : [ "Exploit" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html", "name" : "APPLE-SA-2005-08-17", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html", "name" : "APPLE-SA-2005-08-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111065974004648&w=2", "name" : "20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1", "name" : "101864", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-707", "name" : "DSA-707", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml", "name" : "GLSA-200503-19", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060", "name" : "MDKSA-2005:060", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html", "name" : "SUSE-SA:2005:019", "refsource" : "SUSE", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html", "name" : "RHSA-2005:334", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html", "name" : "RHSA-2005:348", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12781", "name" : "12781", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.trustix.org/errata/2005/0009/", "name" : "2005-0009", "refsource" : "TRUSTIX", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19658", "name" : "mysql-udfinit-gain-access(19658)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10180", "name" : "oval:org.mitre.oval:def:10180", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/96-1/", "name" : "USN-96-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-12-17T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0711", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "3.23.49", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.5a", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html", "name" : "20050310 Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation", "refsource" : "VULNWATCH", "tags" : [ "Exploit" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html", "name" : "APPLE-SA-2005-08-17", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html", "name" : "APPLE-SA-2005-08-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1", "name" : "101864", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-707", "name" : "DSA-707", "refsource" : "DEBIAN", "tags" : [ "Exploit" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml", "name" : "GLSA-200503-19", "refsource" : "GENTOO", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:060", "name" : "MDKSA-2005:060", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_19_mysql.html", "name" : "SUSE-SA:2005:019", "refsource" : "SUSE", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-334.html", "name" : "RHSA-2005:334", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-348.html", "name" : "RHSA-2005:348", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12781", "name" : "12781", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.trustix.org/errata/2005/0009/", "name" : "2005-0009", "refsource" : "TRUSTIX", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591", "name" : "oval:org.mitre.oval:def:9591", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/96-1/", "name" : "USN-96-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-12-17T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0712", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0713", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-21T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0714", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0340. Reason: This candidate is a reservation duplicate of CVE-2005-0340. Notes: All CVE users should reference CVE-2005-0340 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0715", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AFP Server in Mac OS X before 10.3.8 uses insecure permissions for \"Drop Boxes,\" which allows local users to read the contents of a Drop Box." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-21T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0716", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html", "name" : "APPLE-SA-2005-03-21", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities", "name" : "20050321 Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13224", "name" : "13224", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-21T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0718", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0.patch1", "version_affected" : "=" }, { "version_value" : "2.0.patch2", "version_affected" : "=" }, { "version_value" : "2.0.pre1", "version_affected" : "=" }, { "version_value" : "2.0.release", "version_affected" : "=" }, { "version_value" : "2.0_patch2", "version_affected" : "=" }, { "version_value" : "2.1.patch1", "version_affected" : "=" }, { "version_value" : "2.1.patch2", "version_affected" : "=" }, { "version_value" : "2.1.pre1", "version_affected" : "=" }, { "version_value" : "2.1.pre3", "version_affected" : "=" }, { "version_value" : "2.1.pre4", "version_affected" : "=" }, { "version_value" : "2.1.release", "version_affected" : "=" }, { "version_value" : "2.1_patch2", "version_affected" : "=" }, { "version_value" : "2.2.devel3", "version_affected" : "=" }, { "version_value" : "2.2.devel4", "version_affected" : "=" }, { "version_value" : "2.2.pre1", "version_affected" : "=" }, { "version_value" : "2.2.pre2", "version_affected" : "=" }, { "version_value" : "2.2.stable1", "version_affected" : "=" }, { "version_value" : "2.2.stable2", "version_affected" : "=" }, { "version_value" : "2.2.stable3", "version_affected" : "=" }, { "version_value" : "2.2.stable4", "version_affected" : "=" }, { "version_value" : "2.2.stable5", "version_affected" : "=" }, { "version_value" : "2.3.devel2", "version_affected" : "=" }, { "version_value" : "2.3.devel3", "version_affected" : "=" }, { "version_value" : "2.3.stable1", "version_affected" : "=" }, { "version_value" : "2.3.stable2", "version_affected" : "=" }, { "version_value" : "2.3.stable3", "version_affected" : "=" }, { "version_value" : "2.3.stable4", "version_affected" : "=" }, { "version_value" : "2.3.stable5", "version_affected" : "=" }, { "version_value" : "2.3_.stable4", "version_affected" : "=" }, { "version_value" : "2.3_.stable5", "version_affected" : "=" }, { "version_value" : "2.3_stable5", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4.stable1", "version_affected" : "=" }, { "version_value" : "2.4.stable2", "version_affected" : "=" }, { "version_value" : "2.4.stable3", "version_affected" : "=" }, { "version_value" : "2.4.stable4", "version_affected" : "=" }, { "version_value" : "2.4.stable6", "version_affected" : "=" }, { "version_value" : "2.4.stable7", "version_affected" : "=" }, { "version_value" : "2.4_.stable2", "version_affected" : "=" }, { "version_value" : "2.4_.stable6", "version_affected" : "=" }, { "version_value" : "2.4_.stable7", "version_affected" : "=" }, { "version_value" : "2.4_stable7", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5_.stable1", "version_affected" : "=" }, { "version_value" : "2.5_.stable3", "version_affected" : "=" }, { "version_value" : "2.5_.stable4", "version_affected" : "=" }, { "version_value" : "2.5_.stable5", "version_affected" : "=" }, { "version_value" : "2.5_.stable6", "version_affected" : "=" }, { "version_value" : "2.5_stable3", "version_affected" : "=" }, { "version_value" : "2.5_stable4", "version_affected" : "=" }, { "version_value" : "2.5_stable9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931", "name" : "CLA-2005:931", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://fedoranews.org/updates/FEDORA--.shtml", "name" : "FLSA-2006:152809", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/12508", "name" : "12508", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-415.html", "name" : "RHSA-2005:415", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-489.html", "name" : "RHSA-2005:489", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13166", "name" : "13166", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1224", "name" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=1224", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post", "name" : "http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19919", "name" : "squid-put-post-dos(19919)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11562", "name" : "oval:org.mitre.oval:def:11562", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/111-1/", "name" : "USN-111-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-14T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0719", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "tru64", "version" : { "version_data" : [ { "version_value" : "4.0f", "version_affected" : "=" }, { "version_value" : "4.0g", "version_affected" : "=" }, { "version_value" : "5.1a", "version_affected" : "=" }, { "version_value" : "5.1b1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111040492127482&w=2", "name" : "SSRT4891", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14549/", "name" : "14549", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12768", "name" : "12768", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19642", "name" : "tru64-system-message-dos(19642)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:tru64:4.0f:pk8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:tru64:4.0g:pk4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:tru64:5.1a:pk6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:tru64:5.1b1:pk3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:tru64:5.1b1:pk4:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-09T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0720", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcnews", "product" : { "product_data" : [ { "product_name" : "mcnews", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111025679324892&w=2", "name" : "20050307 PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14528", "name" : "14528", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/476277/100/0/threaded", "name" : "20070811 mcNews (skinfile) Remote File Include Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12776", "name" : "12776", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19616", "name" : "mcnews-skinfile-file-include(19616)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0721", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gamearena", "product" : { "product_data" : [ { "product_name" : "experience2", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2", "name" : "20050307 Multiples Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gamearena:experience2:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0722", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "experience2", "product" : { "product_data" : [ { "product_name" : "experience2", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111030766324600&w=2", "name" : "20050307 Multiples Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:experience2:experience2:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-07T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0723", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2", "name" : "20050308 Multiple vulnerabilities in paFileDB", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0724", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111031801802851&w=2", "name" : "20050308 Multiple vulnerabilities in paFileDB", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0725", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wf-sections", "product" : { "product_data" : [ { "product_name" : "wf-sections", "version" : { "version_data" : [ { "version_value" : "1.07", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111049618519821&w=2", "name" : "20050308 Wfsection 1.07 vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19660", "name" : "wfsections-wfsfiles-sql-injection(19660)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wf-sections:wf-sections:1.07:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0726", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ubbcentral", "product" : { "product_data" : [ { "product_name" : "ubb.threads", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111056135818279&w=2", "name" : "20050311 UBB.threads 6 SQL Injection", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0727", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0728", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0736. Reason: This candidate is a duplicate of CVE-2005-0736. Notes: All CVE users should reference CVE-2005-0736 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0729", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "techland", "product" : { "product_data" : [ { "product_name" : "xpand_rally", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/xprallyfs-adv.txt", "name" : "http://aluigi.altervista.org/adv/xprallyfs-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14545", "name" : "14545", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html", "name" : "http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19649", "name" : "xpandrally-message-format-string(19649)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:techland:xpand_rally:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:techland:xpand_rally:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0730", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "py_software", "product" : { "product_data" : [ { "product_name" : "active_webcam", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "name" : "20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14553", "name" : "14553", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://secway.org/advisory/ad20050104.txt", "name" : "http://secway.org/advisory/ad20050104.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19647", "name" : "active-webcam-dos(19647)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\\a.txt." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0731", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "py_software", "product" : { "product_data" : [ { "product_name" : "active_webcam", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "name" : "20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14553", "name" : "14553", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secway.org/advisory/ad20050104.txt", "name" : "http://secway.org/advisory/ad20050104.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19650", "name" : "active-webcam-filelist-dos(19650)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0732", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "py_software", "product" : { "product_data" : [ { "product_name" : "active_webcam", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "name" : "20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14553", "name" : "14553", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://secway.org/advisory/ad20050104.txt", "name" : "http://secway.org/advisory/ad20050104.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19652", "name" : "active-webcam-path-disclosure(19652)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0733", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "py_software", "product" : { "product_data" : [ { "product_name" : "active_webcam", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "name" : "20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14553", "name" : "14553", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://secway.org/advisory/ad20050104.txt", "name" : "http://secway.org/advisory/ad20050104.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19654", "name" : "active-webcam-file-disclosure(19654)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0734", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "py_software", "product" : { "product_data" : [ { "product_name" : "active_webcam", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "name" : "20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14553", "name" : "14553", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secway.org/advisory/ad20050104.txt", "name" : "http://secway.org/advisory/ad20050104.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19653", "name" : "active-webcam-memory-dos(19653)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0735", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "newsscript.co.uk", "product" : { "product_data" : [ { "product_name" : "newsscript", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12761", "name" : "12761", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newsscript.co.uk:newsscript:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2009-04-03T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0736", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_2.0", "version_affected" : "=" }, { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html|ChangeSet@-1d", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html|ChangeSet@-1d", "refsource" : "CONFIRM", "tags" : [ "Broken Link" ] }, { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html", "name" : "20050309 overwriting low kernel memory", "refsource" : "FULLDISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12763", "name" : "12763", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870", "name" : "oval:org.mitre.oval:def:9870", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/95-1/", "name" : "USN-95-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-09T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0737", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yahoo", "product" : { "product_data" : [ { "product_name" : "messenger", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1046", "version_affected" : "=" }, { "version_value" : "5.0.1065", "version_affected" : "=" }, { "version_value" : "5.0.1232", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.5.1249", "version_affected" : "=" }, { "version_value" : "5.6", "version_affected" : "=" }, { "version_value" : "5.6.0.1347", "version_affected" : "=" }, { "version_value" : "5.6.0.1351", "version_affected" : "=" }, { "version_value" : "5.6.0.1355", "version_affected" : "=" }, { "version_value" : "5.6.0.1356", "version_affected" : "=" }, { "version_value" : "5.6.0.1358", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1643", "version_affected" : "=" }, { "version_value" : "6.0.0.1750", "version_affected" : "=" }, { "version_value" : "6.0.0.1921", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html", "name" : "20050308 Yahoo! Messenger Offline Mode Status Remote Buffer Overflow Vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12750", "name" : "12750", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.0.1046:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.0.1065:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.0.1232:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.5.1249:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1347:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1355:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1356:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:5.6.0.1358:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0.0.1643:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yahoo:messenger:6.0.0.1921:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0738", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14543", "name" : "14543", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.microsoft.com/?kbid=891504", "name" : "891504", "refsource" : "MSKB", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2020-04-09T13:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0739", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.9", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707", "name" : "http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111066805726551&w=2", "name" : "20050312 Ethereal remote buffer overflow #2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05", "name" : "http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-718", "name" : "DSA-718", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html", "name" : "FLSA-2006:152922", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-306.html", "name" : "RHSA-2005:306", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12762", "name" : "12762", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687", "name" : "oval:org.mitre.oval:def:9687", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.10.9" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0740", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openbsd", "product" : { "product_data" : [ { "product_name" : "openbsd", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13819", "name" : "13819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1012861", "name" : "1012861", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.openbsd.org/errata35.html", "name" : "20050111 027: RELIABILITY FIX: January 11, 2005", "refsource" : "OPENBSD", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12250", "name" : "12250", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-01-13T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0741", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yabb", "product" : { "product_data" : [ { "product_name" : "yabb", "version" : { "version_data" : [ { "version_value" : "2.0_rc1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013420", "name" : "1013420", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12756", "name" : "12756", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yabb:yabb:2.0_rc1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0742", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_application_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57742-1", "name" : "57742", "refsource" : "SUNALERT", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200314-1", "name" : "200314", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12775", "name" : "12775", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2010-03-02T05:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0743", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xoops", "product" : { "product_data" : [ { "product_name" : "xoops", "version" : { "version_data" : [ { "version_value" : "1.0_rc1", "version_affected" : "=" }, { "version_value" : "1.0_rc3", "version_affected" : "=" }, { "version_value" : "1.0_rc3.0.5", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.5.1", "version_affected" : "=" }, { "version_value" : "2.0.5.2", "version_affected" : "=" }, { "version_value" : "2.0.9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14520", "name" : "14520", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/392626", "name" : "20050308 [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation", "refsource" : "BUGTRAQ", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12754", "name" : "12754", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.xoops.org/modules/news/article.php?storyid=2114", "name" : "http://www.xoops.org/modules/news/article.php?storyid=2114", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19634", "name" : "xoops-uploader-file-upload(19634)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.0_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.0_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.0_rc3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0744", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "ichain", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14527", "name" : "14527", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013406", "name" : "1013406", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm", "name" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19646", "name" : "ichain-gain-access(19646)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0745", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "utstarcom", "product" : { "product_data" : [ { "product_name" : "ian-02ex_voip_ata", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0168.html", "name" : "20050307 Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14544", "name" : "14544", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing \"*#26845#\" and causing a device reset." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:utstarcom:ian-02ex_voip_ata:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-09T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0746", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "ichain", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.113", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111091102023359&w=2", "name" : "20050315 [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14537", "name" : "14537", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013407", "name" : "1013407", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm", "name" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.infobyte.com.ar/adv/ISR-03.html", "name" : "http://www.infobyte.com.ar/adv/ISR-03.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12766", "name" : "12766", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19643", "name" : "ichain-path-disclosure(19643)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0747", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "applyyourself", "product" : { "product_data" : [ { "product_name" : "i-class", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013400", "name" : "1013400", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:applyyourself:i-class:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-08T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0748", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webinsta", "product" : { "product_data" : [ { "product_name" : "webinsta_mailing_manager", "version" : { "version_data" : [ { "version_value" : "1.3d", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14550", "name" : "14550", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013409", "name" : "1013409", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12773", "name" : "12773", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0248", "name" : "ADV-2005-0248", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19651", "name" : "webinsta-initdb-file-include(19651)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webinsta:webinsta_mailing_manager:1.3d:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0749", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.9.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.15_pre20", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "<=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U", "name" : "20060402-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6", "name" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14713/", "name" : "14713", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19607", "name" : "19607", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-529.html", "name" : "RHSA-2005:529", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-551.html", "name" : "RHSA-2005:551", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12935", "name" : "12935", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19867", "name" : "kernel-loadelflibrary-dos(19867)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10640", "name" : "oval:org.mitre.oval:def:10640", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/103-1/", "name" : "USN-103-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.11.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-01T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0750", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_1.0", "version_affected" : "=" }, { "version_value" : "core_2.0", "version_affected" : "=" }, { "version_value" : "core_3.0", "version_affected" : "=" } ] } }, { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032913.html", "name" : "20050327 local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5", "refsource" : "FULLDISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111204562102633&w=2", "name" : "20050327 local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-283.html", "name" : "RHSA-2005:283", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-284.html", "name" : "RHSA-2005:284", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-293.html", "name" : "RHSA-2005:293", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12911", "name" : "12911", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19844", "name" : "kernel-bluezsockcreate-integer-underflow(19844)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11719", "name" : "oval:org.mitre.oval:def:11719", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-27T05:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0751", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-06-09T04:00Z", "lastModifiedDate" : "2008-09-10T19:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0752", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14938", "name" : "14938", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-34.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-34.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html", "name" : "RHSA-2005:383", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13228", "name" : "13228", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024", "name" : "oval:org.mitre.oval:def:100024", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10279", "name" : "oval:org.mitre.oval:def:10279", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-18T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0753", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cvs", "product" : { "product_data" : [ { "product_name" : "cvs", "version" : { "version_data" : [ { "version_value" : "1.10", "version_affected" : "=" }, { "version_value" : "1.10.6", "version_affected" : "=" }, { "version_value" : "1.10.7", "version_affected" : "=" }, { "version_value" : "1.10.8", "version_affected" : "=" }, { "version_value" : "1.11", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.1_p1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" }, { "version_value" : "1.11.11", "version_affected" : "=" }, { "version_value" : "1.11.14", "version_affected" : "=" }, { "version_value" : "1.11.15", "version_affected" : "=" }, { "version_value" : "1.11.16", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/attachment.cgi?id=54352&action=view", "name" : "http://bugs.gentoo.org/attachment.cgi?id=54352&action=view", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14976/", "name" : "14976", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-742", "name" : "DSA-742", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-16.xml", "name" : "GLSA-200504-16", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_24_cvs.html", "name" : "SUSE-SA:2005:024", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-387.html", "name" : "RHSA-2005:387", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20148", "name" : "cvs-bo(20148)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9688", "name" : "oval:org.mitre.oval:def:9688", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-18T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0754", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "quanta", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } }, { "product_name" : "kde", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "conectiva", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "fedora_core", "version" : { "version_data" : [ { "version_value" : "core_3.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "5.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff", "name" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111419664411051&w=2", "name" : "20050422 [KDE Security Advisory]: Kommander untrusted code execution", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/15060", "name" : "15060", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.kde.org/info/security/advisory-20050420-1.txt", "name" : "http://www.kde.org/info/security/advisory-20050420-1.txt", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13313", "name" : "13313", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:quanta:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-04-22T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0755", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "helix_player", "version" : { "version_data" : [ { "version_value" : "10.0.3", "version_affected" : "<=" } ] } }, { "product_name" : "realone_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0_6.0.12.690", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111401615202987&w=2", "name" : "20050420 RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://pb.specialised.info/all/adv/real-ram-adv.txt", "name" : "http://pb.specialised.info/all/adv/real-ram-adv.txt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://service.real.com/help/faq/security/050419_player/EN/", "name" : "http://service.real.com/help/faq/security/050419_player/EN/", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.html", "name" : "FEDORA-2005-329", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-363.html", "name" : "RHSA-2005:363", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-392.html", "name" : "RHSA-2005:392", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-394.html", "name" : "RHSA-2005:394", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205", "name" : "oval:org.mitre.oval:def:11205", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:mac_os_x:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:unix:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-04-19T04:00Z", "lastModifiedDate" : "2017-11-21T14:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0756", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17073", "name" : "17073", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/18056", "name" : "18056", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/18059", "name" : "18059", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-921", "name" : "DSA-921", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-922", "name" : "DSA-922", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-514.html", "name" : "RHSA-2005:514", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "name" : "FLSA:157459-3", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/428058/100/0/threaded", "name" : "FLSA:157459-2", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13891", "name" : "13891", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11119", "name" : "oval:org.mitre.oval:def:11119", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/137-1/", "name" : "USN-137-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-08T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0757", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/18056", "name" : "18056", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18059", "name" : "18059", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-921", "name" : "DSA-921", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-922", "name" : "DSA-922", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-294.html", "name" : "RHSA-2005:294", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13680", "name" : "13680", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11406", "name" : "oval:org.mitre.oval:def:11406", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-18T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0758", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "gzip", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.4a", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "5.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt", "name" : "SCOSA-2005.58", "refsource" : "SCO", "tags" : [ "Third Party Advisory" ] }, { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc", "name" : "20060301-01-U", "refsource" : "SGI", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=90626", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=90626", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://docs.info.apple.com/article.html?artnum=306172", "name" : "http://docs.info.apple.com/article.html?artnum=306172", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html", "name" : "APPLE-SA-2007-07-31", "refsource" : "APPLE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html", "name" : "RHSA-2005:357", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/18100", "name" : "18100", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/19183", "name" : "19183", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/22033", "name" : "22033", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/26235", "name" : "26235", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://securitytracker.com/id?1013928", "name" : "1013928", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852", "name" : "SSA:2006-262", "refsource" : "SLACKWARE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html", "name" : "FLSA:158801", "refsource" : "FEDORA", "tags" : [ "Broken Link", "Permissions Required" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200505-05.xml", "name" : "GLSA-200505-05", "refsource" : "GENTOO", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026", "name" : "MDKSA-2006:026", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:027", "name" : "MDKSA-2006:027", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html", "name" : "OpenPKG-SA-2007.002", "refsource" : "OPENPKG", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.osvdb.org/16371", "name" : "16371", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html", "name" : "RHSA-2005:474", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/13582", "name" : "13582", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/25159", "name" : "25159", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.ubuntu.com/usn/usn-158-1", "name" : "USN-158-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2007/2732", "name" : "ADV-2007-2732", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/20539", "name" : "gzip-zgrep-file-installation(20539)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1081", "name" : "oval:org.mitre.oval:def:1081", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1107", "name" : "oval:org.mitre.oval:def:1107", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9797", "name" : "oval:org.mitre.oval:def:9797", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.3.5" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-13T04:00Z", "lastModifiedDate" : "2019-10-16T20:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0759", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.8", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.4.5", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "5.4.8", "version_affected" : "=" }, { "version_value" : "5.4.8.2.1.1.0", "version_affected" : "=" }, { "version_value" : "5.5.3.2.1.2.0", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.6.0_2003-04-09", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013550", "name" : "1013550", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2005/dsa-702", "name" : "DSA-702", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html", "name" : "SUSE-SA:2005:017", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12875", "name" : "12875", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022", "name" : "oval:org.mitre.oval:def:11022", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0760", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.8", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.4.5", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "5.4.8", "version_affected" : "=" }, { "version_value" : "5.4.8.2.1.1.0", "version_affected" : "=" }, { "version_value" : "5.5.3.2.1.2.0", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.6.0_2003-04-09", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013550", "name" : "1013550", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-702", "name" : "DSA-702", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html", "name" : "SUSE-SA:2005:017", "refsource" : "SUSE", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11184", "name" : "oval:org.mitre.oval:def:11184", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0761", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.8", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.4.5", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "5.4.8", "version_affected" : "=" }, { "version_value" : "5.4.8.2.1.1.0", "version_affected" : "=" }, { "version_value" : "5.5.3.2.1.2.0", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.6.0_2003-04-09", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.2.5", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.0.7", "version_affected" : "=" }, { "version_value" : "6.0.8", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1.1.6", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.1.4", "version_affected" : "=" }, { "version_value" : "6.1.5", "version_affected" : "=" }, { "version_value" : "6.1.6", "version_affected" : "=" }, { "version_value" : "6.1.7", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sgi", "product" : { "product_data" : [ { "product_name" : "propack", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013550", "name" : "1013550", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html", "name" : "SUSE-SA:2005:017", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12876", "name" : "12876", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11150", "name" : "oval:org.mitre.oval:def:11150", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0762", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagemagick", "product" : { "product_data" : [ { "product_name" : "imagemagick", "version" : { "version_data" : [ { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.8", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.4.5", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "5.4.8", "version_affected" : "=" }, { "version_value" : "5.4.8.2.1.1.0", "version_affected" : "=" }, { "version_value" : "5.5.3.2.1.2.0", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.6.0_2003-04-09", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2005-070.html", "name" : "RHSA-2005:070", "refsource" : "REDHAT", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013550", "name" : "1013550", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-702", "name" : "DSA-702", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html", "name" : "SUSE-SA:2005:017", "refsource" : "SUSE", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736", "name" : "oval:org.mitre.oval:def:9736", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0763", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "midnight_commander", "product" : { "product_data" : [ { "product_name" : "midnight_commander", "version" : { "version_data" : [ { "version_value" : "4.5.55", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.debian.org/security/2005/dsa-698", "name" : "DSA-698", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-512.html", "name" : "RHSA-2005:512", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:midnight_commander:midnight_commander:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.5.55" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0764", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "marc_lehmann", "product" : { "product_data" : [ { "product_name" : "rxvt-unicode", "version" : { "version_data" : [ { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.8", "version_affected" : "=" }, { "version_value" : "3.9", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84680", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=84680", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-23.xml", "name" : "GLSA-200503-23", "refsource" : "GENTOO", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:marc_lehmann:rxvt-unicode:5.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0765", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12762", "name" : "12762", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10048", "name" : "oval:org.mitre.oval:def:10048", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-12T05:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0766", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ethereal_group", "product" : { "product_data" : [ { "product_name" : "ethereal", "version" : { "version_data" : [ { "version_value" : "0.10.9", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "name" : "http://www.ethereal.com/appnotes/enpa-sa-00018.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml", "name" : "GLSA-200503-16", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:053", "name" : "MDKSA-2005:053", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12762", "name" : "12762", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9866", "name" : "oval:org.mitre.oval:def:9866", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.10.9" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0767", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945", "name" : "CLA-2005:945", "refsource" : "CONECTIVA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10431", "name" : "oval:org.mitre.oval:def:10431", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/95-1/", "name" : "USN-95-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0768", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "goodtech_systems", "product" : { "product_data" : [ { "product_name" : "goodtech_telnet_server", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111092012415193&w=2", "name" : "20050315 GoodTech Telnet Server Buffer Overflow Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://unsecure.altervista.org/security/goodtechtelnet.htm", "name" : "http://unsecure.altervista.org/security/goodtechtelnet.htm", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:goodtech_systems:goodtech_telnet_server:4.0:*:windows_nt:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:goodtech_systems:goodtech_telnet_server:5.0:*:windows_nt:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0769", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openslp", "product" : { "product_data" : [ { "product_name" : "openslp", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8_a", "version_affected" : "=" }, { "version_value" : "1.0.9_a", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0_.0", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2_.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14561", "name" : "14561", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/22128", "name" : "22128", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml", "name" : "GLSA-200503-25", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:055", "name" : "MDKSA-2005:055", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_15_openslp.html", "name" : "SUSE-SA:2005:015", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/447537/100/0/threaded", "name" : "SSRT061149", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12792", "name" : "12792", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2006/3879", "name" : "ADV-2006-3879", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19683", "name" : "openslp-slp-bo(19683)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/98-1/", "name" : "USN-98-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.8_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.9_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.0_.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openslp:openslp:1.2_.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0770", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "datarescue", "product" : { "product_data" : [ { "product_name" : "ida_pro", "version" : { "version_data" : [ { "version_value" : "4.7.0.830", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111100269512216&w=2", "name" : "20050316 ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://pb.specialised.info/all/adv/ida-debugger-adv.txt", "name" : "http://pb.specialised.info/all/adv/ida-debugger-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14610", "name" : "14610", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic;f=2;t=000155;p=0", "name" : "http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic;f=2;t=000155;p=0", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:datarescue:ida_pro:4.7.0.830:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0771", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec_veritas", "product" : { "product_data" : [ { "product_name" : "backup_exec", "version" : { "version_data" : [ { "version_value" : "9.0_rev.4367", "version_affected" : "=" }, { "version_value" : "9.0_rev.4454", "version_affected" : "=" }, { "version_value" : "9.1_rev.4691", "version_affected" : "=" }, { "version_value" : "10.0_rev.5484", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/15789", "name" : "15789", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014273", "name" : "1014273", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://seer.support.veritas.com/docs/276605.htm", "name" : "http://seer.support.veritas.com/docs/276605.htm", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://seer.support.veritas.com/docs/277429.htm", "name" : "http://seer.support.veritas.com/docs/277429.htm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true", "name" : "20050623 Veritas Backup Exec Server Remote Registry Access Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/584505", "name" : "VU#584505", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "name" : "TA05-180A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-23T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0772", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec_veritas", "product" : { "product_data" : [ { "product_name" : "backup_exec", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0_sp1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/15789", "name" : "15789", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1014273", "name" : "1014273", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://seer.support.veritas.com/docs/276533.htm", "name" : "http://seer.support.veritas.com/docs/276533.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://seer.support.veritas.com/docs/277485.htm", "name" : "http://seer.support.veritas.com/docs/277485.htm", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true", "name" : "20050623 Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities", "name" : "20050623 Veritas Backup Exec Agent Error Status Remote DoS Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) \"Error Status\" value, which triggers a null dereference." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_sp1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-28T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0773", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec_veritas", "product" : { "product_data" : [ { "product_name" : "backup_exec", "version" : { "version_data" : [ { "version_value" : "9.0.4019", "version_affected" : "=" }, { "version_value" : "9.0.4170", "version_affected" : "=" }, { "version_value" : "9.0.4172", "version_affected" : "=" }, { "version_value" : "9.0.4174", "version_affected" : "=" }, { "version_value" : "9.0.4202", "version_affected" : "=" }, { "version_value" : "9.0_rev.4367", "version_affected" : "=" }, { "version_value" : "9.0_rev.4367_sp1", "version_affected" : "=" }, { "version_value" : "9.0_rev.4454", "version_affected" : "=" }, { "version_value" : "9.0_rev.4454_sp1", "version_affected" : "=" }, { "version_value" : "9.1.306", "version_affected" : "=" }, { "version_value" : "9.1.307", "version_affected" : "=" }, { "version_value" : "9.1.1067.2", "version_affected" : "=" }, { "version_value" : "9.1.1067.3", "version_affected" : "=" }, { "version_value" : "9.1.1127.1", "version_affected" : "=" }, { "version_value" : "9.1.1151.1", "version_affected" : "=" }, { "version_value" : "9.1.1152", "version_affected" : "=" }, { "version_value" : "9.1.1152.4", "version_affected" : "=" }, { "version_value" : "9.1.1154", "version_affected" : "=" }, { "version_value" : "9.1_rev.4691", "version_affected" : "=" }, { "version_value" : "9.1_rev.4691_sp2", "version_affected" : "=" }, { "version_value" : "10.0_rev.5484", "version_affected" : "=" }, { "version_value" : "10.0_rev.5484_sp1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/15789", "name" : "15789", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1014273", "name" : "1014273", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://seer.support.veritas.com/docs/276604.htm", "name" : "http://seer.support.veritas.com/docs/276604.htm", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://seer.support.veritas.com/docs/277429.htm", "name" : "http://seer.support.veritas.com/docs/277429.htm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true", "name" : "20050623 Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/492105", "name" : "VU#492105", "refsource" : "CERT-VN", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.osvdb.org/17624", "name" : "17624", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/14022", "name" : "14022", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "name" : "TA05-180A", "refsource" : "CERT", "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4170:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4172:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4174:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0.4202:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367_sp1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454_sp1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.306:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.307:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1127.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1151.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1.1154:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691_sp2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484_sp1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-06-18T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0774", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.0_rc3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2", "name" : "20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14576", "name" : "14576", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12779", "name" : "12779", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19675", "name" : "photopost-uid-sql-injection(19675)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-10T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0775", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.0_rc3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2", "name" : "20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14576", "name" : "14576", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12779", "name" : "12779", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19676", "name" : "photopost-email-security-bypass(19676)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0776", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.0_rc3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2", "name" : "20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14576", "name" : "14576", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12779", "name" : "12779", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19677", "name" : "photopost-image-modification(19677)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0777", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.0_rc3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2", "name" : "20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14576", "name" : "14576", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12779", "name" : "12779", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19678", "name" : "photopost-editbio-xss(19678)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0778", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.0_rc3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065868402859&w=2", "name" : "20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14576", "name" : "14576", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12779", "name" : "12779", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19679", "name" : "photopost-file-upload(19679)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0779", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "platinumftp", "product" : { "product_data" : [ { "product_name" : "platinumftpserver", "version" : { "version_data" : [ { "version_value" : "1.0.18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111066232415249&w=2", "name" : "20050312 PlatinumFTP 1.0.18 remote DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/455609/100/0/threaded", "name" : "20070101 Re: PlatinumFTP 1.0.18 remote DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12790", "name" : "12790", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19674", "name" : "platinumftp-username-dos(19674)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \\ (backslash) in the username." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:platinumftp:platinumftpserver:1.0.18:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0780", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0_beta_3.1", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111066293914977&w=2", "name" : "20050312 [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-12T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0781", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0_beta_3.1", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2", "name" : "20050312 [SECURITYREASON.COM] SQL injection and XSS in paFileDB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12788", "name" : "12788", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19688", "name" : "pafiledb-viewall-category-sql-injection(19688)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0782", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0_beta_3.1", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://digitalparadox.org/advisories/pafdb.txt", "name" : "http://digitalparadox.org/advisories/pafdb.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111065796525043&w=2", "name" : "20050312 [SECURITYREASON.COM] SQL injection and XSS in paFileDB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2", "name" : "20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12788", "name" : "12788", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19690", "name" : "pafiledb-viewall-category-xss(19690)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0783", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phorum", "product" : { "product_data" : [ { "product_name" : "phorum", "version" : { "version_data" : [ { "version_value" : "5.0.14", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2", "name" : "20050313 3 XSS Vulnerabilities in Phorum <= 5.0.14", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14554", "name" : "14554", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12800", "name" : "12800", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0784", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phorum", "product" : { "product_data" : [ { "product_name" : "phorum", "version" : { "version_data" : [ { "version_value" : "5.0.14", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111083279031544&w=2", "name" : "20050313 3 XSS Vulnerabilities in Phorum <= 5.0.14", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14554", "name" : "14554", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12800", "name" : "12800", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0785", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yabb", "product" : { "product_data" : [ { "product_name" : "yabb", "version" : { "version_data" : [ { "version_value" : "2.0_rc1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111083400601759&w=2", "name" : "20050313 YaBB2 rc1 XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013420", "name" : "1013420", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12756", "name" : "12756", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19671", "name" : "yabb-usersrecentposts-xss(19671)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yabb:yabb:2.0_rc1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0786", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "simpgb", "product" : { "product_data" : [ { "product_name" : "simpgb", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111082702422979&w=2", "name" : "20050313 SimpGB SQL Injection Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14583", "name" : "14583", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12801", "name" : "12801", "refsource" : "BID", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19694", "name" : "simpgb-gbnew-sql-injection(19694)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:simpgb:simpgb:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0787", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wine", "product" : { "product_data" : [ { "product_name" : "wine", "version" : { "version_data" : [ { "version_value" : "2005-02-11", "version_affected" : "=" }, { "version_value" : "2005-03-05", "version_affected" : "=" }, { "version_value" : "2005-03-10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.winehq.org/show_bug.cgi?id=2715", "name" : "http://bugs.winehq.org/show_bug.cgi?id=2715", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111082537009842&w=2", "name" : "20050314 [ZH2005-02SA] Insecure tmp file creation in Wine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013428", "name" : "1013428", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12791", "name" : "12791", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.zone-h.org/advisories/read/id=7300", "name" : "http://www.zone-h.org/advisories/read/id=7300", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19697", "name" : "wine-registry-information-disclosure(19697)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wine:wine:2005-02-11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wine:wine:2005-03-05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wine:wine:2005-03-10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0788", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "limewire", "product" : { "product_data" : [ { "product_name" : "limewire", "version" : { "version_data" : [ { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2", "name" : "20050314 LimeWire Gnutella client two vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14555/", "name" : "14555", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml", "name" : "GLSA-200503-37", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19693", "name" : "limewire-client-information-disclosure(19693)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:limewire:limewire:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:limewire:limewire:4.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0789", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "limewire", "product" : { "product_data" : [ { "product_name" : "limewire", "version" : { "version_data" : [ { "version_value" : "3.9.6", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111082448213238&w=2", "name" : "20050314 LimeWire Gnutella client two vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14555/", "name" : "14555", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml", "name" : "GLSA-200503-37", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19695", "name" : "limewire-magnet-directory-traversal(19695)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:limewire:limewire:3.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:limewire:limewire:4.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0790", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpadsnew", "product" : { "product_data" : [ { "product_name" : "phpadsnew", "version" : { "version_data" : [ { "version_value" : "2.0.4_pr1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2", "name" : "20050314 [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc", "name" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013429", "name" : "1013429", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19689", "name" : "phpadsnews-path-disclosure(19689)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0791", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111083286926490&w=2", "name" : "20050314 [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14592", "name" : "14592", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc", "name" : "http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013429", "name" : "1013429", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14787", "name" : "14787", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12803", "name" : "12803", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19692", "name" : "phpadsnew-phpini-xss(19692)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4_pr1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0792", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zpanel", "product" : { "product_data" : [ { "product_name" : "zpanel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5_beta", "version_affected" : "=" }, { "version_value" : "2.5_beta9", "version_affected" : "=" }, { "version_value" : "2.5_beta10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2", "name" : "20050315 Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2", "name" : "20050320 Re: Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14602", "name" : "14602", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12809", "name" : "12809", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19709", "name" : "zpanel-index-sql-injection(19709)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0793", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zpanel", "product" : { "product_data" : [ { "product_name" : "zpanel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5_beta", "version_affected" : "=" }, { "version_value" : "2.5_beta9", "version_affected" : "=" }, { "version_value" : "2.5_beta10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2", "name" : "20050315 Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2", "name" : "20050320 Re: Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12809", "name" : "12809", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0794", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zpanel", "product" : { "product_data" : [ { "product_name" : "zpanel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5_beta10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111090324111053&w=2", "name" : "20050315 Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111142323616309&w=2", "name" : "20050320 Re: Few remote bugs in zPanel", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14602", "name" : "14602", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19711", "name" : "zpanel-reinstall-security-bypass(19711)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zpanel:zpanel:2.5_beta10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0795", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hola", "product" : { "product_data" : [ { "product_name" : "holacms", "version" : { "version_data" : [ { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2a", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.9_1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html", "name" : "20050315 Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14566", "name" : "14566", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.holacms.de/?content=changelog", "name" : "http://www.holacms.de/?content=changelog", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672", "name" : "hola-votefilename-directory-traversal(19672)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.2a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.9_1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-14T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0796", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111090966815089&w=2", "name" : "20050315 Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14566", "name" : "14566", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.holacms.de/?content=changelog", "name" : "http://www.holacms.de/?content=changelog", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a \"holaDB/votes\" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:hola:holacms:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.9" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:hola:holacms:1.4.9_1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0797", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111091027000721&w=2", "name" : "20050315 [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14607", "name" : "14607", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.infobyte.com.ar/adv/ISR-04.html", "name" : "http://www.infobyte.com.ar/adv/ISR-04.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12811", "name" : "12811", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0798", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "ichain", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.113", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111091517007681&w=2", "name" : "20050315 [ISR] - Novell iChain Mini FTP Server Bruteforce Problem", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14607", "name" : "14607", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013408", "name" : "1013408", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm", "name" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.infobyte.com.ar/adv/ISR-05.html", "name" : "http://www.infobyte.com.ar/adv/ISR-05.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14648", "name" : "14648", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp1a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.2.113:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:ichain:2.3:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0799", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "4.1.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.mysql.com/bug.php?id=9148", "name" : "http://bugs.mysql.com/bug.php?id=9148", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111091250923281&w=2", "name" : "20050315 Denial of Service Vulnerability in MySQL Server for Windows", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14564", "name" : "14564", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-15T05:00Z", "lastModifiedDate" : "2019-12-17T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0800", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcnews", "product" : { "product_data" : [ { "product_name" : "mcnews", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1a", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111108900102438&w=2", "name" : "20050317 PHP mcNews arbitrary file inclusion", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14528", "name" : "14528", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/445606/100/0/threaded", "name" : "20060906 mcNews v1.3 - Remote File Include", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12835", "name" : "12835", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19726", "name" : "mcnews-install-file-include(19726)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcnews:mcnews:1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0801", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "includer.cgi", "product" : { "product_data" : [ { "product_name" : "includer.cgi", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111109052121557&w=2", "name" : "20050317 Another includer.cgi problem?", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:includer.cgi:includer.cgi:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0802", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "asp_press", "product" : { "product_data" : [ { "product_name" : "acs_blog", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111108840811698&w=2", "name" : "20050317 XSS in ACS blog", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14625/", "name" : "14625", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013470", "name" : "1013470", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/14861", "name" : "14861", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12836", "name" : "12836", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19728", "name" : "acs-blog-search-xss(19728)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asp_press:acs_blog:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asp_press:acs_blog:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asp_press:acs_blog:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asp_press:acs_blog:1.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0803", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111108743527497&w=2", "name" : "20050317 Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14631", "name" : "14631", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17223", "name" : "17223", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17461", "name" : "17461", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1015168", "name" : "1015168", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf", "name" : "http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/134756", "name" : "VU#134756", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.osvdb.org/20580", "name" : "20580", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12834", "name" : "12834", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-312A.html", "name" : "TA05-312A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/2348", "name" : "ADV-2005-2348", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053", "name" : "MS05-053", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19727", "name" : "win-2000-gdi32dll-dos(19727)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121", "name" : "oval:org.mitre.oval:def:1121", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152", "name" : "oval:org.mitre.oval:def:1152", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215", "name" : "oval:org.mitre.oval:def:1215", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240", "name" : "oval:org.mitre.oval:def:1240", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671", "name" : "oval:org.mitre.oval:def:671", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka \"Enhanced Metafile Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0804", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailenable", "product" : { "product_data" : [ { "product_name" : "mailenable_standard", "version" : { "version_data" : [ { "version_value" : "1.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111108519331738&w=2", "name" : "20050317 See-security Advisory: Format string vulnerability in MailEnable 1.8", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14627", "name" : "14627", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12833", "name" : "12833", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0805", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "subdreamer", "product" : { "product_data" : [ { "product_name" : "subdreamer_light", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111116479910230&w=2", "name" : "20050318 possible SQL injection in Subdreamer", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/437983/100/200/threaded", "name" : "20060621 Re: possible SQL injection in Subdreamer", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12839", "name" : "12839", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.subdreamer.com/forum/showthread.php?t=2501", "name" : "http://www.subdreamer.com/forum/showthread.php?t=2501", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:subdreamer:subdreamer_light:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0806", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ximian", "product" : { "product_data" : [ { "product_name" : "evolution", "version" : { "version_data" : [ { "version_value" : "2.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.ximian.com/show_bug.cgi?id=72609", "name" : "http://bugzilla.ximian.com/show_bug.cgi?id=72609", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:059", "name" : "MDKSA-2005:059", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-397.html", "name" : "RHSA-2005:397", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10532", "name" : "oval:org.mitre.oval:def:10532", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/166-1/", "name" : "USN-166-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ximian:evolution:2.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0807", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oxid", "product" : { "product_data" : [ { "product_name" : "cain_and_abel", "version" : { "version_data" : [ { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5_beta21", "version_affected" : "=" }, { "version_value" : "2.5_beta29", "version_affected" : "=" }, { "version_value" : "2.5_beta34", "version_affected" : "=" }, { "version_value" : "2.5_beta36", "version_affected" : "=" }, { "version_value" : "2.5_beta40", "version_affected" : "=" }, { "version_value" : "2.5_beta41", "version_affected" : "=" }, { "version_value" : "2.5_beta47", "version_affected" : "=" }, { "version_value" : "2.5_beta51", "version_affected" : "=" }, { "version_value" : "2.5_beta56", "version_affected" : "=" }, { "version_value" : "2.5_beta59", "version_affected" : "=" }, { "version_value" : "2.5_beta65", "version_affected" : "=" }, { "version_value" : "2.65", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111116097313427&w=2", "name" : "20050318 Cain & Abel PSK Sniffer Heap overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14630", "name" : "14630", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://securitytracker.com/id?1013476", "name" : "1013476", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.oxid.it/", "name" : "http://www.oxid.it/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12840", "name" : "12840", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19742", "name" : "cain-abel-ikepsk-bo(19742)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19744", "name" : "cain-abel-http-filter-bo(19744)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.5_beta65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oxid:cain_and_abel:2.65:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0808", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "tomcat", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.1a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html", "name" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/204710", "name" : "VU#204710", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/JGEI-6A2LEF", "name" : "http://www.kb.cert.org/vuls/id/JGEI-6A2LEF", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12795", "name" : "12795", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19681", "name" : "tomcat-manager-ajp12-dos(19681)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.2.2:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:3.3.1a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0809", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "notify_technology", "product" : { "product_data" : [ { "product_name" : "notifylink", "version" : { "version_data" : [ { "version_value" : "enterprise_server", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14617", "name" : "14617", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/581068", "name" : "VU#581068", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12843", "name" : "12843", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0810", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "notify_technology", "product" : { "product_data" : [ { "product_name" : "notifylink", "version" : { "version_data" : [ { "version_value" : "enterprise_server", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14617", "name" : "14617", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/264097", "name" : "VU#264097", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12843", "name" : "12843", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0811", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "notify_technology", "product" : { "product_data" : [ { "product_name" : "notifylink", "version" : { "version_data" : [ { "version_value" : "enterprise_server", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14617", "name" : "14617", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/131828", "name" : "VU#131828", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12843", "name" : "12843", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0812", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "notify_technology", "product" : { "product_data" : [ { "product_name" : "notifylink", "version" : { "version_data" : [ { "version_value" : "enterprise_server", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14617", "name" : "14617", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/770532", "name" : "VU#770532", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12843", "name" : "12843", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0813", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "initial_redirect", "product" : { "product_data" : [ { "product_name" : "initial_redirect_squid_proxy_plug-in", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/13674", "name" : "13674", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/14832", "name" : "14832", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12827", "name" : "12827", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vanheusden.com/ir/", "name" : "http://www.vanheusden.com/ir/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0814", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lysator", "product" : { "product_data" : [ { "product_name" : "lsh", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.lysator.liu.se/pipermail/lsh-bugs/2005q1/000328.html", "name" : "[lsh-bugs] 20050316 ANNOUNCE: LSH-2.0.1, fix for denial of service bug", "refsource" : "MLIST", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14609", "name" : "14609", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2005/dsa-717", "name" : "DSA-717", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19724", "name" : "lsh-lshd-dos(19724)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lysator:lsh:2.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0815", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.9.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.15_pre20", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.23_ow2", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.24_ow1", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1", "name" : "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17002", "name" : "17002", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18684", "name" : "18684", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072", "name" : "MDKSA-2006:072", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-663.html", "name" : "RHSA-2005:663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2006-0190.html", "name" : "RHSA-2006:0190", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2006-0191.html", "name" : "RHSA-2006:0191", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/393590", "name" : "20050317 Linux ISO9660 handling flaws", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12837", "name" : "12837", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/1878", "name" : "ADV-2005-1878", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532", "name" : "FLSA:152532", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19741", "name" : "kernel-iso9660-filesystem(19741)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9307", "name" : "oval:org.mitre.oval:def:9307", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple \"range checking flaws\" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.2.27:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0816", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.7", "version_affected" : "=" }, { "version_value" : "5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013462", "name" : "1013462", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57710-1", "name" : "57710", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12838", "name" : "12838", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19729", "name" : "solaris-newgrp-bo(19729)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0817", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "enterprise_firewall", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" } ] } }, { "product_name" : "velociraptor", "version" : { "version_data" : [ { "version_value" : "model_1300", "version_affected" : "=" } ] } }, { "product_name" : "gateway_security_5300", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } }, { "product_name" : "gateway_security_5400", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-06/0225.html", "name" : "20040615 Symantec Enterprise Firewall DNSD cache poisoning Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14595", "name" : "14595", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html", "name" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013451", "name" : "1013451", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.isc.sans.org/diary.php?date=2005-03-04", "name" : "http://www.isc.sans.org/diary.php?date=2005-03-04", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16423", "name" : "sef-dns-spoofing(16423)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44530", "name" : "symantec-dnsdproxy-redirect(44530)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:enterprise_firewall:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:velociraptor:model_1300:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:symantec:gateway_security_5300:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:symantec:gateway_security_5400:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0818", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "punbb", "product" : { "product_data" : [ { "product_name" : "punbb", "version" : { "version_data" : [ { "version_value" : "1.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013446", "name" : "1013446", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19725", "name" : "punbb-email-jabber-xss(19725)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0819", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "netware", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013460", "name" : "1013460", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm", "name" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12831", "name" : "12831", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0820", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013454", "name" : "1013454", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.microsoft.com/kb/867443", "name" : "867443", "refsource" : "MSKB", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14882", "name" : "14882", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12824", "name" : "12824", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:office_infopath:2003:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0821", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013457", "name" : "1013457", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105574", "name" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105574", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12821", "name" : "12821", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19723", "name" : "metaframe-conferencing-gain-access(19723)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:citrix:metaframe_conferencing_manager:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0822", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrix", "product" : { "product_data" : [ { "product_name" : "metaframe_password_manager", "version" : { "version_data" : [ { "version_value" : "2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1018077", "name" : "1018077", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.citrix.com/article/CTX105800", "name" : "http://support.citrix.com/article/CTX105800", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254", "name" : "http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105762", "name" : "http://support.citrix.com/kb/entry.jspa?externalID=CTX105762", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/24041", "name" : "24041", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:metaframe_password_manager:2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0823", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "thepoolclub", "product" : { "product_data" : [ { "product_name" : "ipool", "version" : { "version_data" : [ { "version_value" : "1.6.81", "version_affected" : "<=" } ] } }, { "product_name" : "isnooker", "version" : { "version_data" : [ { "version_value" : "1.6.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14629", "name" : "14629", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013458", "name" : "1013458", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1013459", "name" : "1013459", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12830", "name" : "12830", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19717", "name" : "ipool-mydetails-plaintext-password(19717)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19718", "name" : "isnooker-mydetails-plaintext-password(19718)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thepoolclub:ipool:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.6.81" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thepoolclub:isnooker:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.6.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0824", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mathopd", "product" : { "product_data" : [ { "product_name" : "mathopd", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14524", "name" : "14524", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html", "name" : "http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathopd:mathopd:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0825", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lgames", "product" : { "product_data" : [ { "product_name" : "ltris", "version" : { "version_data" : [ { "version_value" : "1.0.8", "version_affected" : "<=" }, { "version_value" : "1.0.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=85770", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=85770", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108", "name" : "http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14635", "name" : "14635", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-24.xml", "name" : "GLSA 200503-24", "refsource" : "GENTOO", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lgames:ltris:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lgames:ltris:1.0.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0826", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ollydbg", "product" : { "product_data" : [ { "product_name" : "ollydbg", "version" : { "version_data" : [ { "version_value" : "1.06", "version_affected" : "=" }, { "version_value" : "1.08b", "version_affected" : "=" }, { "version_value" : "1.09", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111125734701262&w=2", "name" : "20050319 OllyDbg long process Module debug Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013478", "name" : "1013478", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12850", "name" : "12850", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19750", "name" : "ollydbg-long-filename-do(19750)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ollydbg:ollydbg:1.06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ollydbg:ollydbg:1.08b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ollydbg:ollydbg:1.09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ollydbg:ollydbg:1.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0827", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ciamos", "product" : { "product_data" : [ { "product_name" : "ciamos", "version" : { "version_data" : [ { "version_value" : "0.9.2_rc1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "e-xoops", "product" : { "product_data" : [ { "product_name" : "e-xoops", "version" : { "version_data" : [ { "version_value" : "1.05_rev3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "runcms", "product" : { "product_data" : [ { "product_name" : "runcms", "version" : { "version_data" : [ { "version_value" : "1.1a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111117182417422&w=2", "name" : "20050318 runcms installation path", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111125588920928&w=2", "name" : "20050319 Ciamos Installation path(IHS)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14641", "name" : "14641", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf", "name" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19755", "name" : "ciamos-viewcat-path-disclosure(19755)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ciamos:ciamos:0.9.2_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-xoops:e-xoops:1.05_rev3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0828", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ciamos", "product" : { "product_data" : [ { "product_name" : "ciamos", "version" : { "version_data" : [ { "version_value" : "0.9.2_rc1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "e-xoops", "product" : { "product_data" : [ { "product_name" : "e-xoops", "version" : { "version_data" : [ { "version_value" : "1.05r3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "runcms", "product" : { "product_data" : [ { "product_name" : "runcms", "version" : { "version_data" : [ { "version_value" : "1.1a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111117241923006&w=2", "name" : "20050318 runcms highlight.php hole", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111125645312693&w=2", "name" : "20050319 Ciamos Highlight.php Security Hole(IHS)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14641", "name" : "14641", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14648", "name" : "14648", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013485", "name" : "1013485", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt", "name" : "http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf", "name" : "http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/14890", "name" : "14890", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12848", "name" : "12848", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19754", "name" : "ciamos-file-information-disclosure(19754)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ciamos:ciamos:0.9.2_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-xoops:e-xoops:1.05r3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0829", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_fusion", "product" : { "product_data" : [ { "product_name" : "php_fusion", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111125692513645&w=2", "name" : "20050319 [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111142752220155&w=2", "name" : "20050319 Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111142918711745&w=2", "name" : "20050319 Re: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_fusion:php_fusion:5.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0830", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xzabite", "product" : { "product_data" : [ { "product_name" : "dyndnsupdate", "version" : { "version_data" : [ { "version_value" : "0.6.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=84659", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=84659", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14663", "name" : "14663", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-27.xml", "name" : "GLSA-200503-27", "refsource" : "GENTOO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xzabite:dyndnsupdate:0.6.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0831", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php-post", "product" : { "product_data" : [ { "product_name" : "php-post_web_forum", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" }, { "version_value" : "0.22", "version_affected" : "=" }, { "version_value" : "0.32", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/393695", "name" : "20050318 PHP-Post Exploit", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12845", "name" : "12845", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.32:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0832", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php-post", "product" : { "product_data" : [ { "product_name" : "php-post_web_forum", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" }, { "version_value" : "0.22", "version_affected" : "=" }, { "version_value" : "0.32", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.php-post.co.uk/index.php?s=content&p=download", "name" : "http://www.php-post.co.uk/index.php?s=content&p=download", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12845", "name" : "12845", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php-post:php-post_web_forum:0.32:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0833", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "belkin", "product" : { "product_data" : [ { "product_name" : "belkin_54g_wireless_router", "version" : { "version_data" : [ { "version_value" : "f5d7130", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12846", "name" : "12846", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:belkin:belkin_54g_wireless_router:f5d7130:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0834", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12846", "name" : "12846", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:belkin:belkin_54g_wireless_router:f5d7130:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0835", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "belkin", "product" : { "product_data" : [ { "product_name" : "54g_wireless_router", "version" : { "version_data" : [ { "version_value" : "f5d7130", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12846", "name" : "12846", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:belkin:54g_wireless_router:f5d7130:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0836", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "j2se", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_01", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_03", "version_affected" : "=" }, { "version_value" : "1.4.2_04", "version_affected" : "=" }, { "version_value" : "1.4.2_05", "version_affected" : "=" }, { "version_value" : "1.4.2_06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jouko.iki.fi/adv/ws.html", "name" : "http://jouko.iki.fi/adv/ws.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=full-disclosure&m=111117284323657&w=2", "name" : "20050318 Java Web Start argument injection vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14640", "name" : "14640", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1", "name" : "57740", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200255-1", "name" : "200255", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000200.1-1", "name" : "1000200", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200503-28.xml", "name" : "GLSA-200503-28", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_32_java2.html", "name" : "SUSE-SA:2005:032", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12847", "name" : "12847", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_01:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_02:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_03:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_04:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_05:*:sdk:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:j2se:1.4.2_06:*:sdk:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0837", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "icecast", "product" : { "product_data" : [ { "product_name" : "icecast", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14644", "name" : "14644", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013475", "name" : "1013475", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/393705", "name" : "20050318 IceCast up to v2.20 multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12849", "name" : "12849", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19760", "name" : "icecast-get-bypass-security(19760)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0838", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "icecast", "product" : { "product_data" : [ { "product_name" : "icecast", "version" : { "version_data" : [ { "version_value" : "2.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013475", "name" : "1013475", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/393705", "name" : "20050318 IceCast up to v2.20 multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12849", "name" : "12849", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19753", "name" : "icecast-xsl-gain-pivileges(19753)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:icecast:icecast:2.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0839", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@41fa6464E1UuGu6zmketEYxm73KSyQ", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@41fa6464E1UuGu6zmketEYxm73KSyQ", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/linux-kernel@vger.kernel.org/msg64704.html", "name" : "[linux-kernel] 20050301 Re: Breakage from patch: Only root should be able to set the N_MOUSE line discipline.", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "name" : "FLSA:157459-3", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460", "name" : "oval:org.mitre.oval:def:9460", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0840", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0706. Reason: This candidate is a duplicate of CVE-2005-0706. Notes: All CVE users should reference CVE-2005-0706 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0841", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyfamily", "product" : { "product_data" : [ { "product_name" : "phpmyfamily", "version" : { "version_data" : [ { "version_value" : "1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111143649730845&w=2", "name" : "20050321 phpMyFamily 1.4.0 SQL vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14642", "name" : "14642", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013493", "name" : "1013493", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12860", "name" : "12860", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19787", "name" : "phpmyfamily-multiple-scripts-sql-injection(19787)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyfamily:phpmyfamily:1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0842", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kayako", "product" : { "product_data" : [ { "product_name" : "esupport", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111151292704335&w=2", "name" : "20050322 Kayako eSupport Cross Site Scripting", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13563", "name" : "13563", "refsource" : "SECUNIA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0843", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phorum", "product" : { "product_data" : [ { "product_name" : "phorum", "version" : { "version_data" : [ { "version_value" : "5.0.14a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111151651621097&w=2", "name" : "20050322 [ Positive Technologies #SA] Phorum \"location\" HTTP Response", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14680", "name" : "14680", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0844", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nortel", "product" : { "product_data" : [ { "product_name" : "contivity", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111151589203707&w=2", "name" : "20050322 Nortel VPN Client Issue: Clear-text password stored in memory", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013512", "name" : "1013512", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/", "name" : "http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19791", "name" : "nortel-contivity-information-disclosure(19791)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0845", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2", "name" : "20050323 [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=", "name" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14658", "name" : "14658", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.security.org.sg/vuln/surgemail22g3.html", "name" : "http://www.security.org.sg/vuln/surgemail22g3.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0846", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netwin", "product" : { "product_data" : [ { "product_name" : "surgemail", "version" : { "version_data" : [ { "version_value" : "2.2g3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111159967417903&w=2", "name" : "20050323 [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=", "name" : "http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag=", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14658", "name" : "14658", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.security.org.sg/vuln/surgemail22g3.html", "name" : "http://www.security.org.sg/vuln/surgemail22g3.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0847", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "code_ocean", "product" : { "product_data" : [ { "product_name" : "ocean_ftp_server", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14662", "name" : "14662", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12859", "name" : "12859", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19777", "name" : "ocean-ftp-connection-dos(19777)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/893", "name" : "893", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:code_ocean:ocean_ftp_server:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-19T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0848", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "funlabs", "product" : { "product_data" : [ { "product_name" : "4x4_off-road_adventure_iii", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_big_game_hunter_2004_season", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_big_game_hunter_2005", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_dangerous_hunts", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_deer_hunt_2005_season", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "revolution", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "secret_service_in_harms_way", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "shadow_force_razor_unit", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "us_most_wanted_nowhere_to_hide", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14638", "name" : "14638", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013492", "name" : "1013492", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19762", "name" : "funlabs-games-upd-dos(19762)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service via an empty UDP packet to the server, which cannot detect that a new packet has arrived using the socket ioctl." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:4x4_off-road_adventure_iii:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2004_season:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2005:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_dangerous_hunts:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_deer_hunt_2005_season:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:revolution:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:secret_service_in_harms_way:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:shadow_force_razor_unit:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:us_most_wanted_nowhere_to_hide:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0849", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "funlabs", "product" : { "product_data" : [ { "product_name" : "4x4_off-road_adventure_iii", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_big_game_hunter_2004_season", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_big_game_hunter_2005", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_dangerous_hunts", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "cabelas_deer_hunt_2005_season", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "revolution", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "secret_service_in_harms_way", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "shadow_force_razor_unit", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "us_most_wanted_nowhere_to_hide", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/funlabsboom-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14638", "name" : "14638", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013492", "name" : "1013492", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service (crash from invalid memory access) via a malformed join packet with values that cause the server to copy more memory than was actually provided in the packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:4x4_off-road_adventure_iii:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2004_season:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_big_game_hunter_2005:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_dangerous_hunts:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:cabelas_deer_hunt_2005_season:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:revolution:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:secret_service_in_harms_way:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:shadow_force_razor_unit:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:funlabs:us_most_wanted_nowhere_to_hide:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0850", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473", "name" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473", "refsource" : "CONFIRM", "tags" : [ "Product", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12865", "name" : "12865", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.9.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2020-07-28T16:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0851", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-835" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473", "name" : "http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473", "refsource" : "CONFIRM", "tags" : [ "Product", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12865", "name" : "12865", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.9.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2020-07-28T16:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0852", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/393956", "name" : "20050322 Possible windows+python bug", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12870", "name" : "12870", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0853", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "betaparticle", "product" : { "product_data" : [ { "product_name" : "betaparticle_blog", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html", "name" : "20050319 2 vulnerabilities in BetaParticle", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14668", "name" : "14668", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/33233", "name" : "33233", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12861", "name" : "12861", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19779", "name" : "betaparticle-web-root-information-disclosure(19779)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47419", "name" : "bpblog-blog-info-disclosure(47419)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/7499", "name" : "7499", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions 6.0 through 9.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:betaparticle:betaparticle_blog:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:betaparticle:betaparticle_blog:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0854", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "betaparticle", "product" : { "product_data" : [ { "product_name" : "betaparticle_blog", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.betaparticle.com/template_permalink.asp?id=68", "name" : "http://blog.betaparticle.com/template_permalink.asp?id=68", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0360.html", "name" : "20050319 2 vulnerabilities in BetaParticle", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14668", "name" : "14668", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12861", "name" : "12861", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19781", "name" : "betaparticle-blog-authentication-bypass(19781)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:betaparticle:betaparticle_blog:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:betaparticle:betaparticle_blog:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0855", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coolforum", "product" : { "product_data" : [ { "product_name" : "coolforum", "version" : { "version_data" : [ { "version_value" : "0.8.1_beta", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html", "name" : "20050320 -==CoolForum Path Disclosure & Possible SQL Injection==-", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013474", "name" : "1013474", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.php, (5) profile_options.php, (6) profile_perso.php, (7) profile_pm.php, or (8) readannonce.php, which leaks the full pathname in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.8.1_beta" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0856", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coolforum", "product" : { "product_data" : [ { "product_name" : "coolforum", "version" : { "version_data" : [ { "version_value" : "0.8.1_beta", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0358.html", "name" : "20050320 -==CoolForum Path Disclosure & Possible SQL Injection==-", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013474", "name" : "1013474", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.8.1_beta" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0857", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coolforum", "product" : { "product_data" : [ { "product_name" : "coolforum", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013474", "name" : "1013474", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12852", "name" : "12852", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19758", "name" : "coolforum-avatar-xss(19758)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0858", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coolforum", "product" : { "product_data" : [ { "product_name" : "coolforum", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013474", "name" : "1013474", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12852", "name" : "12852", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19759", "name" : "coolforum-adminentete-sql-injection(19759)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19761", "name" : "coolforum-register-sql-injection(19761)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to register.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0859", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "czaries_network", "product" : { "product_data" : [ { "product_name" : "czarnews", "version" : { "version_data" : [ { "version_value" : "1.13b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14670", "name" : "14670", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013486", "name" : "1013486", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14925", "name" : "14925", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14926", "name" : "14926", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12857", "name" : "12857", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/18411", "name" : "18411", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19765", "name" : "czarnews-multiple-scripts-file-include(19765)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27733", "name" : "czarnews-news-config-file-include(27733)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/2009", "name" : "2009", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php. NOTE: some sources have reported the \"dir\" parameter as being affected; however, this is likely a cut-and-paste error from the wrong section of the original vulnerability report. Also, the news.php version was later reported to be in 1.12 through 1.14." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:czaries_network:czarnews:1.13b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-19T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0860", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "the_rusted_gate", "product" : { "product_data" : [ { "product_name" : "trg_news", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14669", "name" : "14669", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013487", "name" : "1013487", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12855", "name" : "12855", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:the_rusted_gate:trg_news:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0861", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "delegate", "product" : { "product_data" : [ { "product_name" : "delegate", "version" : { "version_data" : [ { "version_value" : "8.11.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14649", "name" : "14649", "refsource" : "SECUNIA", "tags" : [ "Patch" ] }, { "url" : "http://www.delegate.org/mail-lists/delegate-en/2840", "name" : "http://www.delegate.org/mail-lists/delegate-en/2840", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19775", "name" : "delegate-bo(19775)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to \"overflows on arrays.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:delegate:delegate:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.11.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0862", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpopenchat", "product" : { "product_data" : [ { "product_name" : "phpopenchat", "version" : { "version_data" : [ { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14600", "name" : "14600", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013434", "name" : "1013434", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.albanianhaxorz.org/advisory/phpopenchaten.txt", "name" : "http://www.albanianhaxorz.org/advisory/phpopenchaten.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14807", "name" : "14807", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14808", "name" : "14808", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14809", "name" : "14809", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/465237/100/0/threaded", "name" : "20070410 PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12817", "name" : "12817", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.zone-h.org/advisories/read/id=7310", "name" : "http://www.zone-h.org/advisories/read/id=7310", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19721", "name" : "phpopenchat-file-include(19721)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpopenchat:phpopenchat:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0863", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpopenchat", "product" : { "product_data" : [ { "product_name" : "phpopenchat", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/lists/bugtraq/2005/Mar/0331.html", "name" : "20050317 [PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14651", "name" : "14651", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12841", "name" : "12841", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19748", "name" : "phpopenchat-regulars-register-xss(19748)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0864", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "securecomputing", "product" : { "product_data" : [ { "product_name" : "samsung_adsl_modem", "version" : { "version_data" : [ { "version_value" : "smdk8947v1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt", "name" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12864", "name" : "12864", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://zone-h.org/en/advisories/read/id=7339/", "name" : "http://zone-h.org/en/advisories/read/id=7339/", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:securecomputing:samsung_adsl_modem:smdk8947v1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0865", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "securecomputing", "product" : { "product_data" : [ { "product_name" : "samsung_adsl_modem", "version" : { "version_data" : [ { "version_value" : "smdk8947v1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt", "name" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013615", "name" : "1013615", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12864", "name" : "12864", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://zone-h.org/en/advisories/read/id=7339/", "name" : "http://zone-h.org/en/advisories/read/id=7339/", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:securecomputing:samsung_adsl_modem:smdk8947v1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0866", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cdrtools", "product" : { "product_data" : [ { "product_name" : "cdrecord", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/100-1/", "name" : "USN-100-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cdrtools:cdrecord:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0867", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "name" : "SUSE-SA:2005:018", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "name" : "FLSA:157459-3", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10867", "name" : "oval:org.mitre.oval:def:10867", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0868", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bosanova", "product" : { "product_data" : [ { "product_name" : "launcher400", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "client_access", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "mochasoft", "product" : { "product_data" : [ { "product_name" : "tn5250", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "powerterm", "product" : { "product_data" : [ { "product_name" : "interconnect", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111160242803070&w=2", "name" : "20050323 Backdoors in AS/400 emulations allow the server to attack connected PC workstations", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf", "name" : "http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bosanova:launcher400:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:client_access:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mochasoft:tn5250:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerterm:interconnect:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0869", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpsysinfo", "product" : { "product_data" : [ { "product_name" : "phpsysinfo", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2", "name" : "20050323 [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14690/", "name" : "14690", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19808", "name" : "phpsysinfo-path-disclosure(19808)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0870", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpsysinfo", "product" : { "product_data" : [ { "product_name" : "phpsysinfo", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111161017209422&w=2", "name" : "20050323 [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14690/", "name" : "14690", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/17616", "name" : "17616", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17643", "name" : "17643", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-724", "name" : "DSA-724", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-897", "name" : "DSA-897", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-898", "name" : "DSA-898", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-899", "name" : "DSA-899", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212", "name" : "MDKSA-2005:212", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/416543", "name" : "20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12887", "name" : "12887", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/15414", "name" : "15414", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19807", "name" : "phpsysinfo-sensor-program-xss(19807)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0871", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2", "name" : "20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14659", "name" : "14659", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1013554", "name" : "1013554", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19824", "name" : "topic-calendar-path-disclosure(19824)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0872", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpbb_group", "product" : { "product_data" : [ { "product_name" : "phpbb", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111168190630576&w=2", "name" : "20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14659", "name" : "14659", "refsource" : "SECUNIA", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1013554", "name" : "1013554", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19821", "name" : "topic-calendar-start-xss(19821)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0873", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "10g_reports_server", "version" : { "version_data" : [ { "version_value" : "9.0.4.3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111168323804203&w=2", "name" : "20050324 Oracle Reports Server 10g Vulnerable to XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17250", "name" : "17250", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/210524", "name" : "VU#210524", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html", "name" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12892", "name" : "12892", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/15134", "name" : "15134", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA05-292A.html", "name" : "TA05-292A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:10g_reports_server:9.0.4.3.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0874", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cerulean_studios", "product" : { "product_data" : [ { "product_name" : "trillian", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2", "name" : "20050324 LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14689", "name" : "14689", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013557", "name" : "1013557", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15004", "name" : "15004", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0875", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cerulean_studios", "product" : { "product_data" : [ { "product_name" : "trillian", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111171416802350&w=2", "name" : "20050324 LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14689", "name" : "14689", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0876", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dnsmasq", "product" : { "product_data" : [ { "product_name" : "dnsmasq", "version" : { "version_data" : [ { "version_value" : "2.14", "version_affected" : "=" }, { "version_value" : "2.15", "version_affected" : "=" }, { "version_value" : "2.16", "version_affected" : "=" }, { "version_value" : "2.17", "version_affected" : "=" }, { "version_value" : "2.18", "version_affected" : "=" }, { "version_value" : "2.19", "version_affected" : "=" }, { "version_value" : "2.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14691", "name" : "14691", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12897", "name" : "12897", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "name" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19825", "name" : "dnsmasq-dhcp-offbyone-bo(19825)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0877", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dnsmasq", "product" : { "product_data" : [ { "product_name" : "dnsmasq", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.10", "version_affected" : "=" }, { "version_value" : "2.11", "version_affected" : "=" }, { "version_value" : "2.12", "version_affected" : "=" }, { "version_value" : "2.13", "version_affected" : "=" }, { "version_value" : "2.14", "version_affected" : "=" }, { "version_value" : "2.15", "version_affected" : "=" }, { "version_value" : "2.16", "version_affected" : "=" }, { "version_value" : "2.17", "version_affected" : "=" }, { "version_value" : "2.18", "version_affected" : "=" }, { "version_value" : "2.19", "version_affected" : "=" }, { "version_value" : "2.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14691", "name" : "14691", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12897", "name" : "12897", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "name" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19826", "name" : "dnsmasq-dns-cache-poisoning(19826)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dnsmasq:dnsmasq:2.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0878", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mercuryboard", "product" : { "product_data" : [ { "product_name" : "mercuryboard_message_board", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14679", "name" : "14679", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12872", "name" : "12872", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19797", "name" : "mercuryboard-title-pm-xss(19797)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mercuryboard:mercuryboard_message_board:1.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0879", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vortex_portal", "product" : { "product_data" : [ { "product_name" : "vortex_portal", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html", "name" : "20050323 Vortex Portal", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14707", "name" : "14707", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013545", "name" : "1013545", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14958", "name" : "14958", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/14959", "name" : "14959", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12878", "name" : "12878", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19809", "name" : "vortexportal-act-file-include(19809)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vortex_portal:vortex_portal:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0880", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vortex_portal", "product" : { "product_data" : [ { "product_name" : "vortex_portal", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html", "name" : "20050323 Vortex Portal", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19811", "name" : "vortex-portal-path-disclosure(19811)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vortex_portal:vortex_portal:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0881", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "interspire", "product" : { "product_data" : [ { "product_name" : "articlelive", "version" : { "version_data" : [ { "version_value" : "2005", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=112483966331737&w=2", "name" : "20050823 Re: Interspire ArticleLive 2005 (php version) is vulnerable to XSS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14708", "name" : "14708", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/394069", "name" : "20050323 Interspire ArticleLive 2005 (php version) is vulnerable to XSS", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12879", "name" : "12879", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19817", "name" : "articlelive-articleid-xss(19817)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:interspire:articlelive:2005:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0882", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "birdblog", "product" : { "product_data" : [ { "product_name" : "birdblog", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://birdblog.sourceforge.net/ChangeLog", "name" : "http://birdblog.sourceforge.net/ChangeLog", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5", "name" : "http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14676", "name" : "14676", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013548", "name" : "1013548", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12880", "name" : "12880", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19799", "name" : "birdblog-admincore-sql-injection(19799)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:birdblog:birdblog:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:birdblog:birdblog:1.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0883", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digitalhive", "product" : { "product_data" : [ { "product_name" : "digitalhive", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14702", "name" : "14702", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013516", "name" : "1013516", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12883", "name" : "12883", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19803", "name" : "digitalhive-basephp-xss(19803)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digitalhive:digitalhive:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-23T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0884", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digitalhive", "product" : { "product_data" : [ { "product_name" : "digitalhive", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013516", "name" : "1013516", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19802", "name" : "digitalhive-reinstall(19802)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digitalhive:digitalhive:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0885", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xmb_forum", "product" : { "product_data" : [ { "product_name" : "xmb", "version" : { "version_data" : [ { "version_value" : "1.9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013515", "name" : "1013515", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12886", "name" : "12886", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) \"Send To\" fields." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmb_forum:xmb:1.9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0886", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "invision_power_services", "product" : { "product_data" : [ { "product_name" : "invision_board", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1_final", "version_affected" : "=" }, { "version_value" : "1.3_final", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0_alpha_3", "version_affected" : "=" }, { "version_value" : "2.0_pdr3", "version_affected" : "=" }, { "version_value" : "2.0_pf1", "version_affected" : "=" }, { "version_value" : "2.0_pf2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12888", "name" : "12888", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0887", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "michael_dean", "product" : { "product_data" : [ { "product_name" : "double_choco_latte", "version" : { "version_data" : [ { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4.2", "version_affected" : "=" }, { "version_value" : "0.9.4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14688", "name" : "14688", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013559", "name" : "1013559", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=315144", "name" : "http://sourceforge.net/project/shownotes.php?release_id=315144", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19806", "name" : "dcl-file-include(19806)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-24T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0888", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "michael_dean", "product" : { "product_data" : [ { "product_name" : "double_choco_latte", "version" : { "version_data" : [ { "version_value" : "0.9.4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14688", "name" : "14688", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013559", "name" : "1013559", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=315160", "name" : "http://sourceforge.net/project/shownotes.php?release_id=315160", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19805", "name" : "dcl-xss(19805)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0889", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dream4", "product" : { "product_data" : [ { "product_name" : "koobi_cms", "version" : { "version_data" : [ { "version_value" : "4.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013558", "name" : "1013558", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12895", "name" : "12895", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dream4:koobi_cms:4.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-24T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0890", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dream4", "product" : { "product_data" : [ { "product_name" : "koobi_cms", "version" : { "version_data" : [ { "version_value" : "4.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14696", "name" : "14696", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013558", "name" : "1013558", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12896", "name" : "12896", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dream4:koobi_cms:4.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0891", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gtk", "product" : { "product_data" : [ { "product_name" : "gtk+", "version" : { "version_data" : [ { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958", "name" : "CLSA-2005:958", "refsource" : "CONECTIVA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/17657", "name" : "17657", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:214", "name" : "MDKSA-2005:214", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-343.html", "name" : "RHSA-2005:343", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-344.html", "name" : "RHSA-2005:344", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/419771/100/0/threaded", "name" : "FLSA-2005:155510", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12950", "name" : "12950", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710", "name" : "oval:org.mitre.oval:def:9710", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gtk:gtk\\+:2.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0892", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "smail", "product" : { "product_data" : [ { "product_name" : "smail", "version" : { "version_data" : [ { "version_value" : "3.2.0.120", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2", "name" : "20050325 smail remote and local root holes", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-722", "name" : "DSA-722", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smail:smail:3.2.0.120:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-28T05:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0893", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "smail", "product" : { "product_data" : [ { "product_name" : "smail", "version" : { "version_data" : [ { "version_value" : "3.2.0.120", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111177045217717&w=2", "name" : "20050325 smail remote and local root holes", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smail:smail:3.2.0.120:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0894", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openmosixview", "product" : { "product_data" : [ { "product_name" : "openmosixview", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111176899423078&w=2", "name" : "20050325 RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14693", "name" : "14693", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12902", "name" : "12902", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openmosixview:openmosixview:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0895", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netcomm", "product" : { "product_data" : [ { "product_name" : "nb1300", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111177093020587&w=2", "name" : "20050325 Netcomm 1300NB DSL Modem Denial of Service", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12901", "name" : "12901", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netcomm:nb1300:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:netcomm:nb1300:4.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0896", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "accomplishtechnology", "product" : { "product_data" : [ { "product_name" : "phpmydirectory", "version" : { "version_data" : [ { "version_value" : "10.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111176904423360&w=2", "name" : "20050325 phpMyDirectory 10.1.3-rel Cross site scripting", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14692", "name" : "14692", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12900", "name" : "12900", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0897", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "magicscripts", "product" : { "product_data" : [ { "product_name" : "e-store_kit-2", "version" : { "version_data" : [ { "version_value" : "paypal", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2", "name" : "20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12910", "name" : "12910", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:magicscripts:e-store_kit-2:paypal:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0898", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "magicscripts", "product" : { "product_data" : [ { "product_name" : "e-store_kit-2", "version" : { "version_data" : [ { "version_value" : "paypal", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186424600509&w=2", "name" : "20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12909", "name" : "12909", "refsource" : "BID", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:magicscripts:e-store_kit-2:paypal:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-26T05:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0899", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "os_400", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186209318029&w=2", "name" : "20050325 AS/400 LDAP user accounts disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:os_400:5.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0900", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nukebookmarks", "product" : { "product_data" : [ { "product_name" : "nukebookmarks", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2", "name" : "20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://nukebookmarks.sourceforge.net/", "name" : "http://nukebookmarks.sourceforge.net/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://zone-h.org/advisories/read/id=7356", "name" : "http://zone-h.org/advisories/read/id=7356", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-26T05:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0901", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nukebookmarks", "product" : { "product_data" : [ { "product_name" : "nukebookmarks", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2", "name" : "20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://nukebookmarks.sourceforge.net/", "name" : "http://nukebookmarks.sourceforge.net/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://zone-h.org/advisories/read/id=7356", "name" : "http://zone-h.org/advisories/read/id=7356", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0902", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nukebookmarks", "product" : { "product_data" : [ { "product_name" : "nukebookmarks", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186145609320&w=2", "name" : "20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://nukebookmarks.sourceforge.net/", "name" : "http://nukebookmarks.sourceforge.net/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://zone-h.org/advisories/read/id=7356", "name" : "http://zone-h.org/advisories/read/id=7356", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nukebookmarks:nukebookmarks:0.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0903", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime_pictureviewer", "version" : { "version_data" : [ { "version_value" : "6.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111186277521713&w=2", "name" : "20050326 QuickTime malformed JPEG buffer overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12905", "name" : "12905", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime_pictureviewer:6.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0904", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013552", "name" : "1013552", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.microsoft.com/kb/889323", "name" : "889323", "refsource" : "MSKB", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19819", "name" : "windows-desktop-tsshutdnexe-dos(19819)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Remote Desktop in Windows XP SP1 does not verify the \"Force shutdown from a remote system\" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0905", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "maxthon", "product" : { "product_data" : [ { "product_name" : "maxthon", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://forum.maxthon.com/forum/index.php?showtopic=18207", "name" : "http://forum.maxthon.com/forum/index.php?showtopic=18207", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=111175236620942&w=2", "name" : "20050325 Maxthon browser search bar information disclosure", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14712", "name" : "14712", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.raffon.net/advisories/maxthon/searchbarid.html", "name" : "http://www.raffon.net/advisories/maxthon/searchbarid.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12898", "name" : "12898", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maxthon:maxthon:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0906", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "instance_four", "product" : { "product_data" : [ { "product_name" : "tincat", "version" : { "version_data" : [ { "version_value" : "release_2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sacred", "product" : { "product_data" : [ { "product_name" : "sacred", "version" : { "version_data" : [ { "version_value" : "1.8.2.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubi_soft", "product" : { "product_data" : [ { "product_name" : "the_settlersheritage_of_kings", "version" : { "version_data" : [ { "version_value" : "1.0_2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/tincat2bof-adv.txt", "name" : "http://aluigi.altervista.org/adv/tincat2bof-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/14762", "name" : "14762", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14767", "name" : "14767", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/394404", "name" : "20050328 Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others)", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12912", "name" : "12912", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:instance_four:tincat:release_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sacred:sacred:1.8.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubi_soft:the_settlersheritage_of_kings:1.0_2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0907", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "valdersoft", "product" : { "product_data" : [ { "product_name" : "shopping_cart", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013565", "name" : "1013565", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2", "name" : "20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:valdersoft:shopping_cart:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0908", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "valdersoft", "product" : { "product_data" : [ { "product_name" : "valdersoft_shopping_cart", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013565", "name" : "1013565", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2", "name" : "20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:valdersoft:valdersoft_shopping_cart:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-28T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0909", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tkais_shoutbox", "product" : { "product_data" : [ { "product_name" : "tkais_shoutbox", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=full-disclosure&m=111202260908735&w=2", "name" : "20050328 THai's Shoutbox correction name", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html", "name" : "20050327 THai's Shoutbox XSS (Spoofing URL) BUG", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12914", "name" : "12914", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tkais_shoutbox:tkais_shoutbox:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0910", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "e-xoops", "product" : { "product_data" : [ { "product_name" : "e-xoops", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013566", "name" : "1013566", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0911", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "e-xoops", "product" : { "product_data" : [ { "product_name" : "e-xoops", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013566", "name" : "1013566", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-28T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0912", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "deplate", "product" : { "product_data" : [ { "product_name" : "deplate", "version" : { "version_data" : [ { "version_value" : "0.7.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013555", "name" : "1013555", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=315034", "name" : "http://sourceforge.net/project/shownotes.php?release_id=315034", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:deplate:deplate:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.7.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-24T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0913", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "smarty", "product" : { "product_data" : [ { "product_name" : "smarty", "version" : { "version_data" : [ { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://news.php.net/php.smarty.dev/2673", "name" : "http://news.php.net/php.smarty.dev/2673", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14729/", "name" : "14729", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-200503-35.xml", "name" : "GLSA-200503-35", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013556", "name" : "1013556", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12941", "name" : "12941", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19880", "name" : "smarty-regexreplace-security-bpass(19880)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:smarty:smarty:2.6.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0914", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cpg-nuke", "product" : { "product_data" : [ { "product_name" : "cpg_dragonfly_cms", "version" : { "version_data" : [ { "version_value" : "9.0.2_.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://security.talte.net/content/view/252/46/", "name" : "http://security.talte.net/content/view/252/46/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013573", "name" : "1013573", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cpg-nuke:cpg_dragonfly_cms:9.0.2_.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-26T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0915", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webmasters-debutants", "product" : { "product_data" : [ { "product_name" : "wd_guestbook", "version" : { "version_data" : [ { "version_value" : "2.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013570", "name" : "1013570", "refsource" : "SECTRACK", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webmasters-debutants:wd_guestbook:2.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0916", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab", "name" : "http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_50_kernel.html", "name" : "SUSE-SA:2005:050", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12987", "name" : "12987", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0917", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "powerdev", "product" : { "product_data" : [ { "product_name" : "encapsbb", "version" : { "version_data" : [ { "version_value" : "0.3.2_fixed", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14761", "name" : "14761", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013569", "name" : "1013569", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15078", "name" : "15078", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:powerdev:encapsbb:0.3.2_fixed:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0918", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "svg_viewer", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.01", "version_affected" : "=" }, { "version_value" : "3.02", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/15255", "name" : "15255", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013890", "name" : "1013890", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/techdocs/323585.html", "name" : "http://www.adobe.com/support/techdocs/323585.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.hyperdose.com/advisories/H2005-07.txt", "name" : "http://www.hyperdose.com/advisories/H2005-07.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:svg_viewer:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:svg_viewer:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:svg_viewer:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:svg_viewer:3.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:svg_viewer:3.02:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-05T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0919", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adventia", "product" : { "product_data" : [ { "product_name" : "adventia_chat", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } }, { "product_name" : "adventia_server_pro", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt", "name" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=111211930330410&w=2", "name" : "20050329 Adventia Chat", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013588", "name" : "1013588", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/15156", "name" : "15156", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12927", "name" : "12927", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12940", "name" : "12940", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21317", "name" : "adventia-chat-field-xss(21317)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adventia:adventia_chat:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adventia:adventia_server_pro:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-29T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0920", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sourceforge.net/project/shownotes.php?release_id=315830", "name" : "http://sourceforge.net/project/shownotes.php?release_id=315830", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12925", "name" : "12925", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:bugtracker.net:bugtracker.net:2.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0921", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "outlook_connector", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.microsoft.com/kb/896093", "name" : "896093", "refsource" : "MSKB", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12913", "name" : "12913", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:outlook_connector:2002:*:ibm_lotus_domino:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0922", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "norton_antivirus", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "norton_internet_security", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "norton_system_works", "version" : { "version_data" : [ { "version_value" : "2004_professional", "version_affected" : "=" }, { "version_value" : "2005_premier", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14741", "name" : "14741", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html", "name" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013585", "name" : "1013585", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013586", "name" : "1013586", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013587", "name" : "1013587", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/146020", "name" : "VU#146020", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12923", "name" : "12923", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_system_works:2004_professional:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0923", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "norton_antivirus", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "norton_internet_security", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2005", "version_affected" : "=" } ] } }, { "product_name" : "norton_system_works", "version" : { "version_data" : [ { "version_value" : "2004_professional", "version_affected" : "=" }, { "version_value" : "2005_premier", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14741", "name" : "14741", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html", "name" : "http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013585", "name" : "1013585", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013586", "name" : "1013586", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013587", "name" : "1013587", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/713620", "name" : "VU#713620", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/12924", "name" : "12924", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_system_works:2004_professional:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0924", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adventia", "product" : { "product_data" : [ { "product_name" : "e-data", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt", "name" : "http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=full-disclosure&m=111211945505635&w=2", "name" : "20050329 E-Data", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14739", "name" : "14739", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013589", "name" : "1013589", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12927", "name" : "12927", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19889", "name" : "edata-new-user-xss(19889)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adventia:e-data:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-29T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0925", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2", "name" : "20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14725", "name" : "14725", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013603", "name" : "1013603", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/15121", "name" : "15121", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.persianhacker.net/news/news-2945.html", "name" : "http://www.persianhacker.net/news/news-2945.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12931", "name" : "12931", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0926", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sylpheed", "product" : { "product_data" : [ { "product_name" : "sylpheed", "version" : { "version_data" : [ { "version_value" : "0.8.11", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.10", "version_affected" : "=" }, { "version_value" : "0.9.11", "version_affected" : "=" }, { "version_value" : "0.9.12", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sylpheed.good-day.net/changelog.html.en", "name" : "http://sylpheed.good-day.net/changelog.html.en", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.8.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:0.9.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sylpheed:sylpheed:1.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0927", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "web-app.org", "product" : { "product_data" : [ { "product_name" : "webapp", "version" : { "version_data" : [ { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.9.1", "version_affected" : "=" }, { "version_value" : "0.9.9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14716", "name" : "14716", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?release_id=316038", "name" : "http://sourceforge.net/project/shownotes.php?release_id=316038", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195", "name" : "http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0928", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "photopost", "product" : { "product_data" : [ { "product_name" : "photopost_php_pro", "version" : { "version_data" : [ { "version_value" : "5.02", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2", "name" : "20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14742", "name" : "14742", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013581", "name" : "1013581", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15096", "name" : "15096", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15097", "name" : "15097", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15098", "name" : "15098", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.02:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0929", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111205342909640&w=2", "name" : "20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111213719017716&w=2", "name" : "20050328 Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14742", "name" : "14742", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013581", "name" : "1013581", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15099", "name" : "15099", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15100", "name" : "15100", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0930", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chatness", "product" : { "product_data" : [ { "product_name" : "chatness", "version" : { "version_data" : [ { "version_value" : "2.5", "version_affected" : "<=" }, { "version_value" : "2.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013604", "name" : "1013604", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.persianhacker.net/news/news-2946.html", "name" : "http://www.persianhacker.net/news/news-2946.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/394526", "name" : "20050329 [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12929", "name" : "12929", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chatness:chatness:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chatness:chatness:2.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0931", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jimmy", "product" : { "product_data" : [ { "product_name" : "the_includer", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12926", "name" : "12926", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jimmy:the_includer:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jimmy:the_includer:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-29T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0932", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "name" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12917", "name" : "12917", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the \"forgotten password\" feature, or (3) the domain name in a package order." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0933", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "<=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "name" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12917", "name" : "12917", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0934", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wackowiki", "product" : { "product_data" : [ { "product_name" : "wackowiki", "version" : { "version_data" : [ { "version_value" : "r4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14720", "name" : "14720", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://wackowiki.com/WackoDownload/InEnglish#h4828-4", "name" : "http://wackowiki.com/WackoDownload/InEnglish#h4828-4", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wackowiki:wackowiki:r4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0935", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "esmi", "product" : { "product_data" : [ { "product_name" : "paypal_storefront", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2", "name" : "20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14711", "name" : "14711", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013563", "name" : "1013563", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774", "name" : "http://www.hackerscenter.com/Archive/view.asp?id=1774", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15057", "name" : "15057", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15058", "name" : "15058", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12903", "name" : "12903", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:esmi:paypal_storefront:1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0936", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "esmi", "product" : { "product_data" : [ { "product_name" : "paypal_storefront", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111221890614271&w=2", "name" : "20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14711", "name" : "14711", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013563", "name" : "1013563", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.hackerscenter.com/Archive/view.asp?id=1774", "name" : "http://www.hackerscenter.com/Archive/view.asp?id=1774", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15059", "name" : "15059", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12904", "name" : "12904", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:esmi:paypal_storefront:1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0937", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6_test9_cvs", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@421cfc11zFsK9gxvSJ2t__FCmuUd3Q", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@421cfc11zFsK9gxvSJ2t__FCmuUd3Q", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lkml.org/lkml/2005/2/22/123", "name" : "http://lkml.org/lkml/2005/2/22/123", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-420.html", "name" : "RHSA-2005:420", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "name" : "FLSA:157459-3", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037", "name" : "oval:org.mitre.oval:def:10037", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.2 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-02-22T05:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0938", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "uapplication", "product" : { "product_data" : [ { "product_name" : "ublog_reload", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214393101387&w=2", "name" : "20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14725", "name" : "14725", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013603", "name" : "1013603", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.persianhacker.net/news/news-2945.html", "name" : "http://www.persianhacker.net/news/news-2945.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uapplication:ublog_reload:1.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0940", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0490. Reason: This candidate was inadvertently referenced in a vendor advisory due to a typo. Notes: All CVE users should reference CVE-2005-0490 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0941", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openoffice", "product" : { "product_data" : [ { "product_name" : "openoffice", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/17027", "name" : "17027", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml", "name" : "GLSA-200504-13", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html", "name" : "SUSE-SR:2005:021", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.openoffice.org/issues/show_bug.cgi?id=46388", "name" : "http://www.openoffice.org/issues/show_bug.cgi?id=46388", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-375.html", "name" : "RHSA-2005:375", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/395516", "name" : "20050412 OpenOffice DOC document Heap Overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13092", "name" : "13092", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106", "name" : "oval:org.mitre.oval:def:9106", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0942", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sybase", "product" : { "product_data" : [ { "product_name" : "adaptive_server_enterprise", "version" : { "version_data" : [ { "version_value" : "11.03.3", "version_affected" : "=" }, { "version_value" : "11.5", "version_affected" : "=" }, { "version_value" : "11.5.1", "version_affected" : "=" }, { "version_value" : "11.9.2", "version_affected" : "=" }, { "version_value" : "12.0", "version_affected" : "=" }, { "version_value" : "12.0.1", "version_affected" : "=" }, { "version_value" : "12.5", "version_affected" : "=" }, { "version_value" : "12.5.2", "version_affected" : "=" }, { "version_value" : "12.5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html", "name" : "20041222 Sybase ASE 12.5.2 vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ "Patch" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111272918117194&w=2", "name" : "20050405 Sybase ASE Multiple Security Issues (#NISR05042005)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13632", "name" : "13632", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ngssoftware.com/advisories/sybase-ase.txt", "name" : "http://www.ngssoftware.com/advisories/sybase-ase.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/393851", "name" : "20050321 Details of Sybase ASE bugs withheld", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12080", "name" : "12080", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.sybase.com/detail/1,6904,1033894,00.html", "name" : "http://www.sybase.com/detail/1,6904,1033894,00.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.sybase.com/detail?id=1034520", "name" : "http://www.sybase.com/detail?id=1034520", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.sybase.com/detail?id=1034752", "name" : "http://www.sybase.com/detail?id=1034752", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19354", "name" : "sybase-adaptive-server(19354)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0943", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "vpn_3002_hardware_client", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3015_concentrator", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3020_concentrator", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3030_concentator", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3060_concentrator", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3080_concentrator", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3000_concentrator_series_software", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5.2.a", "version_affected" : "=" }, { "version_value" : "2.5.2.b", "version_affected" : "=" }, { "version_value" : "2.5.2.c", "version_affected" : "=" }, { "version_value" : "2.5.2.d", "version_affected" : "=" }, { "version_value" : "2.5.2.f", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.3.a", "version_affected" : "=" }, { "version_value" : "3.0.3.b", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1(rel)", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.5(rel)", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.7.a", "version_affected" : "=" }, { "version_value" : "3.6.7.b", "version_affected" : "=" }, { "version_value" : "3.6.7.c", "version_affected" : "=" }, { "version_value" : "3.6.7.d", "version_affected" : "=" }, { "version_value" : "3.6.7.f", "version_affected" : "=" }, { "version_value" : "3.6.7d", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.5.b", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.5.b", "version_affected" : "=" }, { "version_value" : "4.1.7.a", "version_affected" : "=" } ] } }, { "product_name" : "vpn_3005_concentrator_software", "version" : { "version_data" : [ { "version_value" : "4.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14784", "name" : "14784", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml", "name" : "20050330 Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12948", "name" : "12948", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19903", "name" : "cisco-vpn-3000-dos(19903)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-30T05:00Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0944", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "jet", "version" : { "version_data" : [ { "version_value" : "4.0.8618.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.securiteam.com/?p=535", "name" : "http://blogs.securiteam.com/?p=535", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111231465920199&w=2", "name" : "20050331 [HV-HIGH] Microsoft Jet DB engine vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.hexview.com/docs/20050331-1.txt", "name" : "http://www.hexview.com/docs/20050331-1.txt", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/176380", "name" : "VU#176380", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/archive/1/442446/100/100/threaded", "name" : "20060804 Will Microsoft patch remarkable old Msjet40.dll issue?", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/442610/100/100/threaded", "name" : "20060808 Re: Will Microsoft patch remarkable old Msjet40.dll issue?", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:jet:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.8618.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0945", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "asp_press", "product" : { "product_data" : [ { "product_name" : "acs_blog", "version" : { "version_data" : [ { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214069029812&w=2", "name" : "20050328 Multiple XSS vulnerabilities in ACS Blog", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14744/", "name" : "14744", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013584", "name" : "1013584", "refsource" : "SECTRACK", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19864", "name" : "acsblog-tags-xss(19864)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asp_press:acs_blog:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0946", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2", "name" : "20050329 Multiple phpCoin Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "name" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12917", "name" : "12917", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-29T05:00Z", "lastModifiedDate" : "2016-10-18T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0947", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coinsoft_technologies", "product" : { "product_data" : [ { "product_name" : "phpcoin", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.1b", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214190111520&w=2", "name" : "20050329 Multiple phpCoin Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "name" : "http://www.gulftech.org/?node=research&article_id=00065-03292005", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12917", "name" : "12917", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19896", "name" : "phpcoin-auxpage-file-include(19896)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0948", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "iatek", "product" : { "product_data" : [ { "product_name" : "portalapp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt", "name" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2", "name" : "20050329 Multiple sql injection, and xss vulnerabilities in PortalApp", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14749", "name" : "14749", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013591", "name" : "1013591", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12936", "name" : "12936", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19892", "name" : "portalapp-adclick-sql-injection(19892)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0949", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "iatek", "product" : { "product_data" : [ { "product_name" : "portalapp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt", "name" : "http://icis.digitalparadox.org/~dcrab/portalapp.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111213291118273&w=2", "name" : "20050329 Multiple sql injection, and xss vulnerabilities in PortalApp", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14749", "name" : "14749", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013591", "name" : "1013591", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12936", "name" : "12936", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19891", "name" : "portalapp-contentasp-xss(19891)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0950", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "faststone", "product" : { "product_data" : [ { "product_name" : "4in1_browser", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111213034206802&w=2", "name" : "20050329 directory traversal in FastStone 4in1 Browser 1.2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14743", "name" : "14743", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013596", "name" : "1013596", "refsource" : "SECTRACK", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt", "name" : "http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12937", "name" : "12937", "refsource" : "BID", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19900", "name" : "faststone-dotdot-directory-traversal(19900)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\\ (dot dot backslash) in the URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:faststone:4in1_browser:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-29T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0951", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate was created as a result of an analysis error for a researcher advisory for an issue that already existed. It stated an incorrect parameter, which was not part of the vulnerability at all. Notes: CVE users should not reference this candidate at all." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-10T19:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0952", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php_arena", "product" : { "product_data" : [ { "product_name" : "pafiledb", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://digitalparadox.org/advisories/pafdb.txt", "name" : "http://digitalparadox.org/advisories/pafdb.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111221940107161&w=2", "name" : "20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/448017/100/100/threaded", "name" : "20061008 XSS IN paFileDB 3.1", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29394", "name" : "pafiledb-action-xss(29394)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0953", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bzip", "product" : { "product_data" : [ { "product_name" : "bzip2", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.5_a", "version_affected" : "=" }, { "version_value" : "0.9.5_b", "version_affected" : "=" }, { "version_value" : "0.9.5_c", "version_affected" : "=" }, { "version_value" : "0.9.5_d", "version_affected" : "=" }, { "version_value" : "0.9_a", "version_affected" : "=" }, { "version_value" : "0.9_b", "version_affected" : "=" }, { "version_value" : "0.9_c", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc", "name" : "NetBSD-SA2008-004", "refsource" : "NETBSD", "tags" : [ ] }, { "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc", "name" : "20060301-01-U", "refsource" : "SGI", "tags" : [ ] }, { "url" : "http://docs.info.apple.com/article.html?artnum=307041", "name" : "http://docs.info.apple.com/article.html?artnum=307041", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html", "name" : "APPLE-SA-2007-11-14", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111229375217633&w=2", "name" : "20050330 bzip2 TOCTOU file-permissions vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/19183", "name" : "19183", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/27274", "name" : "27274", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/27643", "name" : "27643", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/29940", "name" : "29940", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1", "name" : "103118", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1", "name" : "200191", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-730", "name" : "DSA-730", "refsource" : "DEBIAN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html", "name" : "FLSA:158801", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:026", "name" : "MDKSA-2006:026", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html", "name" : "OpenPKG-SA-2007.002", "refsource" : "OPENPKG", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-474.html", "name" : "RHSA-2005:474", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/456430/30/8730/threaded", "name" : "20070109 rPSA-2007-0004-1 bzip2", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12954", "name" : "12954", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/26444", "name" : "26444", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA07-319A.html", "name" : "TA07-319A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2007/3525", "name" : "ADV-2007-3525", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2007/3868", "name" : "ADV-2007-3868", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19926", "name" : "bzip2-toctou-symlink(19926)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902", "name" : "oval:org.mitre.oval:def:10902", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154", "name" : "oval:org.mitre.oval:def:1154", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.7 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0954", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6.0.2900", "version_affected" : "=" } ] } }, { "product_name" : "windows_explorer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111231106513788&w=2", "name" : "20050331 WindowsXP malformed .wmf files DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securiteam.com/windowsntfocus/5CP081FFFY.html", "name" : "http://www.securiteam.com/windowsntfocus/5CP081FFFY.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/9892", "name" : "9892", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15507", "name" : "winxp-explorer-wmf-dos(15507)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_explorer:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0955", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "interakt", "product" : { "product_data" : [ { "product_name" : "mx_shop", "version" : { "version_data" : [ { "version_value" : "1.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt", "name" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2", "name" : "20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14793", "name" : "14793", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12957", "name" : "12957", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:interakt:mx_shop:1.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0956", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "interakt", "product" : { "product_data" : [ { "product_name" : "mx_kart", "version" : { "version_data" : [ { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt", "name" : "http://icis.digitalparadox.org/~dcrab/mxmk.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111230101127767&w=2", "name" : "20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14793", "name" : "14793", "refsource" : "SECUNIA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:interakt:mx_kart:1.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0957", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bay_technical_associates", "product" : { "product_data" : [ { "product_name" : "rpc3_telnet", "version" : { "version_data" : [ { "version_value" : "f_3.05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111230568025271&w=2", "name" : "20050331 Bay Technical Associates telnet server logon bypass", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12955", "name" : "12955", "refsource" : "BID", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19921", "name" : "rpc3-logon-bypass-authentication(19921)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bay_technical_associates:rpc3_telnet:f_3.05:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-03-31T05:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0958", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yepyep", "product" : { "product_data" : [ { "product_name" : "mtftpd", "version" : { "version_data" : [ { "version_value" : "0.1a", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://unl0ck.org/files/papers/mtftpd.txt", "name" : "http://unl0ck.org/files/papers/mtftpd.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securiteam.com/exploits/5KP0W0AF5K.html", "name" : "http://www.securiteam.com/exploits/5KP0W0AF5K.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12947", "name" : "12947", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.tripbit.org/advisories/TA-040305.txt", "name" : "http://www.tripbit.org/advisories/TA-040305.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0959", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yepyep", "product" : { "product_data" : [ { "product_name" : "mtftpd", "version" : { "version_data" : [ { "version_value" : "0.1a", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12947", "name" : "12947", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.tripbit.org/advisories/TA-040305.txt", "name" : "http://www.tripbit.org/advisories/TA-040305.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yepyep:mtftpd:0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0960", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openbsd", "product" : { "product_data" : [ { "product_name" : "openbsd", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013611", "name" : "1013611", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.openbsd.org/errata.html#sack", "name" : "20050330 [3.6] 013: RELIABILITY FIX: March 30, 2005", "refsource" : "OPENBSD", "tags" : [ "Patch" ] }, { "url" : "http://www.openbsd.org/errata35.html#sack", "name" : "20050330 [3.5] 030: RELIABILITY FIX: March 30, 2005", "refsource" : "OPENBSD", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/12951", "name" : "12951", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0961", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "horde", "product" : { "product_data" : [ { "product_name" : "application_framework", "version" : { "version_data" : [ { "version_value" : "3.0.4_rc1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h", "name" : "http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.horde.org/archives/announce/2005/000176.html", "name" : "http://lists.horde.org/archives/announce/2005/000176.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/14730", "name" : "14730", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_16_sr.html", "name" : "SUSE-SR:2005:016", "refsource" : "SUSE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:application_framework:3.0.4_rc1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0962", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lighthouse_development", "product" : { "product_data" : [ { "product_name" : "squirrelcart", "version" : { "version_data" : [ { "version_value" : "1.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://digitalparadox.org/advisories/sqc.txt", "name" : "http://digitalparadox.org/advisories/sqc.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14770", "name" : "14770", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12944", "name" : "12944", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19904", "name" : "squirrelcart-index-sql-injection(19904)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighthouse_development:squirrelcart:1.5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0963", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "toshiba", "product" : { "product_data" : [ { "product_name" : "acpi_flash_bios", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111214319914810&w=2", "name" : "20050329 Portcullis Security Advisory 05-011 ACPI 1.6 BIOS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111229708208629&w=2", "name" : "20050331 Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111229803502643&w=2", "name" : "20050331 RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19895", "name" : "toshiba-acpi-bios-dos(19895)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed. NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:toshiba:acpi_flash_bios:1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0964", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kerio", "product" : { "product_data" : [ { "product_name" : "personal_firewall", "version" : { "version_data" : [ { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.16", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/14717", "name" : "14717", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013607", "name" : "1013607", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kerio.com/security_advisory.html#0503", "name" : "http://www.kerio.com/security_advisory.html#0503", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12946", "name" : "12946", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19893", "name" : "kerio-firewall-rule-security-bypass(19893)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kerio:personal_firewall:4.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0965", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://gaim.sourceforge.net/security/index.php?id=13", "name" : "http://gaim.sourceforge.net/security/index.php?id=13", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2", "name" : "20050401 multiple remote denial of service vulnerabilities in Gaim", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14815", "name" : "14815", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071", "name" : "MDKSA-2005:071", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html", "name" : "RHSA-2005:365", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12999", "name" : "12999", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292", "name" : "oval:org.mitre.oval:def:11292", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0966", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://gaim.sourceforge.net/security/index.php?id=14", "name" : "http://gaim.sourceforge.net/security/index.php?id=14", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111238715307356&w=2", "name" : "20050401 multiple remote denial of service vulnerabilities in Gaim", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14815", "name" : "14815", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750", "name" : "http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071", "name" : "MDKSA-2005:071", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html", "name" : "RHSA-2005:365", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13003", "name" : "13003", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19937", "name" : "gaim-irc-plugin-bo(19937)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19939", "name" : "gaim-ircmsginvite-dos(19939)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185", "name" : "oval:org.mitre.oval:def:9185", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0967", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rob_flynn", "product" : { "product_data" : [ { "product_name" : "gaim", "version" : { "version_data" : [ { "version_value" : "1.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://gaim.sourceforge.net/security/?id=15", "name" : "http://gaim.sourceforge.net/security/?id=15", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14815", "name" : "14815", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013645", "name" : "1013645", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235", "name" : "http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:071", "name" : "MDKSA-2005:071", "refsource" : "MANDRAKE", "tags" : [ ] }, { "url" : "http://www.novell.com/linux/security/advisories/2005_36_sudo.html", "name" : "SUSE-SA:2005:036", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-365.html", "name" : "RHSA-2005:365", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/426078/100/0/threaded", "name" : "FLSA:158543", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/13004", "name" : "13004", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657", "name" : "oval:org.mitre.oval:def:9657", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rob_flynn:gaim:1.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0968", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ca", "product" : { "product_data" : [ { "product_name" : "etrust_intrusion_detection", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities", "name" : "20050405 Computer Associates eTrust Intrusion Detection System CPImportKey DoS Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ca:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0969", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0970", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2009-10-14T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0971", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/212190", "name" : "VU#212190", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0972", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/185702", "name" : "VU#185702", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0973", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0974", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/May/msg00004.html", "name" : "APPLE-SA-2005-05-19", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/713614", "name" : "VU#713614", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-12T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0975", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opendarwin", "product" : { "product_data" : [ { "product_name" : "darwin_kernel", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://felinemenace.org/advisories/macosx.txt", "name" : "http://felinemenace.org/advisories/macosx.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=110616533903671&w=2", "name" : "20050119 Darwin Kernel Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/13902", "name" : "13902", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1012941", "name" : "1012941", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013735", "name" : "1013735", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.ciac.org/ciac/bulletins/p-185.shtml", "name" : "P-185", "refsource" : "CIAC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12314", "name" : "12314", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0041", "name" : "ADV-2005-0041", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/18979", "name" : "macos-machloader-dos(18979)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opendarwin:darwin_kernel:7.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0976", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "hmdt", "product" : { "product_data" : [ { "product_name" : "shiira", "version" : { "version_data" : [ { "version_value" : "0.93", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "omnigroup", "product" : { "product_data" : [ { "product_name" : "omniweb", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html", "name" : "APPLE-SA-2005-04-15", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://remahl.se/david/vuln/001/", "name" : "http://remahl.se/david/vuln/001/", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hmdt:shiira:0.93:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:omnigroup:omniweb:5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0977", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.8.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://linux.bkbits.net:8080/linux-2.6/cset@420551fbRlv9-QG6Gw9Lw_bKVfPSsg", "name" : "http://linux.bkbits.net:8080/linux-2.6/cset@420551fbRlv9-QG6Gw9Lw_bKVfPSsg", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lkml.org/lkml/2005/2/5/111", "name" : "http://lkml.org/lkml/2005/2/5/111", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-366.html", "name" : "RHSA-2005:366", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "name" : "FLSA:157459-3", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12970", "name" : "12970", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400", "name" : "oval:org.mitre.oval:def:10400", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/103-1/", "name" : "USN-103-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-19T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0978", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ivt", "product" : { "product_data" : [ { "product_name" : "bluesoleil", "version" : { "version_data" : [ { "version_value" : "1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111238511206503&w=2", "name" : "20050401 DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal'", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14790/", "name" : "14790", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt", "name" : "http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12961", "name" : "12961", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19930", "name" : "bluesoleil-object-push-directory-traversal(19930)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ivt:bluesoleil:1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0979", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netmanage", "product" : { "product_data" : [ { "product_name" : "rumba", "version" : { "version_data" : [ { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111238364916500&w=2", "name" : "20050401 Buffer Overflow within the RUMBA product", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12965", "name" : "12965", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19934", "name" : "rumba-profile-values-bo(19934)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netmanage:rumba:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netmanage:rumba:7.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0980", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alstrasoft", "product" : { "product_data" : [ { "product_name" : "epay", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2", "name" : "20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14802", "name" : "14802", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12973", "name" : "12973", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alstrasoft:epay:2.0:*:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0981", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alstrasoft", "product" : { "product_data" : [ { "product_name" : "epay", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111247198021626&w=2", "name" : "20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14802", "name" : "14802", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12974", "name" : "12974", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alstrasoft:epay:2.0:*:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0982", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yet_another_forum.net", "product" : { "product_data" : [ { "product_name" : "yet_another_forum.net", "version" : { "version_data" : [ { "version_value" : "0.9.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111247338301262&w=2", "name" : "20050402 Yet Another Forum.net XSS vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1013632", "name" : "1013632", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yet_another_forum.net:yet_another_forum.net:0.9.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0983", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "activision", "product" : { "product_data" : [ { "product_name" : "call_of_duty", "version" : { "version_data" : [ { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5b", "version_affected" : "=" } ] } }, { "product_name" : "call_of_duty_united_offensive", "version" : { "version_data" : [ { "version_value" : "1.41", "version_affected" : "=" }, { "version_value" : "1.51b", "version_affected" : "=" } ] } }, { "product_name" : "return_to_castle_wolfenstein", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "id_software", "product" : { "product_data" : [ { "product_name" : "quake_3_arena", "version" : { "version_data" : [ { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.16", "version_affected" : "=" }, { "version_value" : "1.31", "version_affected" : "=" } ] } }, { "product_name" : "quake_3_arena_server", "version" : { "version_data" : [ { "version_value" : "1.29f", "version_affected" : "=" }, { "version_value" : "1.29g", "version_affected" : "=" } ] } }, { "product_name" : "quake_3_engine", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "wolfenstein_enemy_territory", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "2.56", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "lucasarts", "product" : { "product_data" : [ { "product_name" : "star_wars_jedi_knight_ii_jedi_outcast", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" } ] } }, { "product_name" : "star_wars_jedi_knight_jedi_academy", "version" : { "version_data" : [ { "version_value" : "1.0.11", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "raven_software", "product" : { "product_data" : [ { "product_name" : "soldier_of_fortune_2", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/q3msgboom-adv.txt", "name" : "http://aluigi.altervista.org/adv/q3msgboom-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322", "name" : "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=111246796918067&w=2", "name" : "20050402 In-game players kicking in the Quake 3 engine", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14811", "name" : "14811", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12976", "name" : "12976", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:call_of_duty:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:call_of_duty:1.5b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:call_of_duty_united_offensive:1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:call_of_duty_united_offensive:1.51b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_arena:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_arena:1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_arena:1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_arena_server:1.29f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_arena_server:1.29g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:wolfenstein_enemy_territory:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:id_software:wolfenstein_enemy_territory:2.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_ii_jedi_outcast:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0984", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lucasarts", "product" : { "product_data" : [ { "product_name" : "star_wars_jedi_knight_jedi_academy", "version" : { "version_data" : [ { "version_value" : "1.0.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aluigi.altervista.org/adv/jamsgbof-adv.txt", "name" : "http://aluigi.altervista.org/adv/jamsgbof-adv.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=111246855213653&w=2", "name" : "20050402 In-game server buffer-overflow in Jedi Academy 1.011", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14809", "name" : "14809", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12977", "name" : "12977", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0985", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://docs.info.apple.com/article.html?artnum=301324", "name" : "http://docs.info.apple.com/article.html?artnum=301324", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.3.7" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-12-31T05:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0986", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino_server", "version" : { "version_data" : [ { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://news.zdnet.co.uk/software/applications/0,39020384,39194293,00.htm", "name" : "http://news.zdnet.co.uk/software/applications/0,39020384,39194293,00.htm", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14858", "name" : "14858", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities", "name" : "20050406 IBM Lotus Domino Server Web Service DoS Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2005/0322", "name" : "ADV-2005-0322", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21202446", "name" : "http://www-1.ibm.com/support/docview.wss?uid=swg21202446", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino_server:6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino_server:6.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2011-03-08T02:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0987", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "irc_services", "product" : { "product_data" : [ { "product_name" : "nickserv_listlinks", "version" : { "version_data" : [ { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.4", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.0.6", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" }, { "version_value" : "5.0.8", "version_affected" : "=" }, { "version_value" : "5.0.9", "version_affected" : "=" }, { "version_value" : "5.0.10", "version_affected" : "=" }, { "version_value" : "5.0.11", "version_affected" : "=" }, { "version_value" : "5.0.12", "version_affected" : "=" }, { "version_value" : "5.0.13", "version_affected" : "=" }, { "version_value" : "5.0.14", "version_affected" : "=" }, { "version_value" : "5.0.15", "version_affected" : "=" }, { "version_value" : "5.0.16", "version_affected" : "=" }, { "version_value" : "5.0.17", "version_affected" : "=" }, { "version_value" : "5.0.18", "version_affected" : "=" }, { "version_value" : "5.0.19", "version_affected" : "=" }, { "version_value" : "5.0.20", "version_affected" : "=" }, { "version_value" : "5.0.21", "version_affected" : "=" }, { "version_value" : "5.0.22", "version_affected" : "=" }, { "version_value" : "5.0.23", "version_affected" : "=" }, { "version_value" : "5.0.24", "version_affected" : "=" }, { "version_value" : "5.0.25", "version_affected" : "=" }, { "version_value" : "5.0.26", "version_affected" : "=" }, { "version_value" : "5.0.27", "version_affected" : "=" }, { "version_value" : "5.0.28", "version_affected" : "=" }, { "version_value" : "5.0.29", "version_affected" : "=" }, { "version_value" : "5.0.30", "version_affected" : "=" }, { "version_value" : "5.0.31", "version_affected" : "=" }, { "version_value" : "5.0.32", "version_affected" : "=" }, { "version_value" : "5.0.33", "version_affected" : "=" }, { "version_value" : "5.0.34", "version_affected" : "=" }, { "version_value" : "5.0.35", "version_affected" : "=" }, { "version_value" : "5.0.36", "version_affected" : "=" }, { "version_value" : "5.0.37", "version_affected" : "=" }, { "version_value" : "5.0.38", "version_affected" : "=" }, { "version_value" : "5.0.39", "version_affected" : "=" }, { "version_value" : "5.0.40", "version_affected" : "=" }, { "version_value" : "5.0.41", "version_affected" : "=" }, { "version_value" : "5.0.42", "version_affected" : "=" }, { "version_value" : "5.0.43", "version_affected" : "=" }, { "version_value" : "5.0.44", "version_affected" : "=" }, { "version_value" : "5.0.45", "version_affected" : "=" }, { "version_value" : "5.0.46", "version_affected" : "=" }, { "version_value" : "5.0.47", "version_affected" : "=" }, { "version_value" : "5.0.48", "version_affected" : "=" }, { "version_value" : "5.0.49", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1013622", "name" : "1013622", "refsource" : "SECTRACK", "tags" : [ "Patch" ] }, { "url" : "http://www.ircservices.esper.net/Changes.txt", "name" : "http://www.ircservices.esper.net/Changes.txt", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:irc_services:nickserv_listlinks:5.0.49:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0988", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "gzip", "version" : { "version_data" : [ { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.4a", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "linux_advanced_workstation", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "trustix", "product" : { "product_data" : [ { "product_name" : "secure_linux", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "turbolinux", "product" : { "product_data" : [ { "product_name" : "turbolinux_appliance_server", "version" : { "version_data" : [ { "version_value" : "1.0_hosting", "version_affected" : "=" }, { "version_value" : "1.0_workgroup", "version_affected" : "=" } ] } }, { "product_name" : "turbolinux_desktop", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } }, { "product_name" : "turbolinux_home", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "turbolinux_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } }, { "product_name" : "turbolinux_workstation", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ubuntu", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "5.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt", "name" : "SCOSA-2005.58", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html", "name" : "APPLE-SA-2006-08-01", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2005-357.html", "name" : "RHSA-2005:357", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/18100", "name" : "18100", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/21253", "name" : "21253", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/22033", "name" : "22033", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852", "name" : "SSA:2006-262", "refsource" : "SLACKWARE", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1", "name" : "101816", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2005/dsa-752", "name" : "DSA-752", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15487", "name" : "15487", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/394965", "name" : "20050404 gzip TOCTOU file-permissions vulnerability", "refsource" : "BUGTRAQ", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12996", "name" : "12996", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/19289", "name" : "19289", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html", "name" : "TA06-214A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2006/3101", "name" : "ADV-2006-3101", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242", "name" : "oval:org.mitre.oval:def:10242", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169", "name" : "oval:org.mitre.oval:def:1169", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765", "name" : "oval:org.mitre.oval:def:765", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.7 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-10-11T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0989", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" } ] } }, { "product_name" : "mozilla", "version" : { "version_data" : [ { "version_value" : "1.7.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "netscape", "product" : { "product_data" : [ { "product_name" : "navigator", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt", "name" : "SCOSA-2005.49", "refsource" : "SCO", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14820", "name" : "14820", "refsource" : "SECUNIA", "tags" : [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/14821", "name" : "14821", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/19823", "name" : "19823", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1013635", "name" : "1013635", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1013643", "name" : "1013643", "refsource" : "SECTRACK", "tags" : [ "Exploit" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml", "name" : "GLSA-200504-18", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/mfsa2005-33.html", "name" : "http://www.mozilla.org/security/announce/mfsa2005-33.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html", "name" : "SUSE-SA:2006:004", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-383.html", "name" : "RHSA-2005:383", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-384.html", "name" : "RHSA-2005:384", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-386.html", "name" : "RHSA-2005:386", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-601.html", "name" : "RHSA-2005:601", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12988", "name" : "12988", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/15495", "name" : "15495", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=288688", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=288688", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025", "name" : "oval:org.mitre.oval:def:100025", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706", "name" : "oval:org.mitre.oval:def:11706", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-05-03T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0990", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "sharutils", "version" : { "version_data" : [ { "version_value" : "4.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2005-377.html", "name" : "RHSA-2005:377", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12981", "name" : "12981", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=8459", "name" : "https://bugzilla.ubuntu.com/show_bug.cgi?id=8459", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19957", "name" : "sharutils-temp-file-symlink(19957)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613", "name" : "oval:org.mitre.oval:def:9613", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/104-1/", "name" : "USN-104-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:sharutils:4.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2018-10-03T21:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0991", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/12992", "name" : "12992", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only", "name" : "IY59205", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only", "name" : "IY59206", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only", "name" : "IY59207", "refsource" : "AIXAPAR", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not \"use a secure location for temporary files,\" which allows local users to have an unknown impact, probably by overwriting files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0992", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyadmin", "product" : { "product_data" : [ { "product_name" : "phpmyadmin", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2_pre1", "version_affected" : "=" }, { "version_value" : "2.2_pre2", "version_affected" : "=" }, { "version_value" : "2.2_rc1", "version_affected" : "=" }, { "version_value" : "2.2_rc2", "version_affected" : "=" }, { "version_value" : "2.2_rc3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.5_pl1", "version_affected" : "=" }, { "version_value" : "2.5.5_rc1", "version_affected" : "=" }, { "version_value" : "2.5.5_rc2", "version_affected" : "=" }, { "version_value" : "2.5.6_rc1", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.7_pl1", "version_affected" : "=" }, { "version_value" : "2.6.0_pl1", "version_affected" : "=" }, { "version_value" : "2.6.0_pl2", "version_affected" : "=" }, { "version_value" : "2.6.0_pl3", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.1_pl1", "version_affected" : "=" }, { "version_value" : "2.6.1_pl3", "version_affected" : "=" }, { "version_value" : "2.6.1_rc1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111264361622660&w=2", "name" : "20050404 phpMyAdmin Cross-site Scripting Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14799", "name" : "14799", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.arrelnet.com/advisories/adv20050403.html", "name" : "http://www.arrelnet.com/advisories/adv20050403.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml", "name" : "GLSA-200504-08", "refsource" : "GENTOO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3", "name" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/12982", "name" : "12982", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19940", "name" : "phpmyadmin-convcharset-xss(19940)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2017-07-11T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0993", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sco", "product" : { "product_data" : [ { "product_name" : "openserver", "version" : { "version_data" : [ { "version_value" : "5.0.6", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111263251718491&w=2", "name" : "20050404 possible privilege escalation on Sco OpenServer 5.0.7", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12986", "name" : "12986", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-18T03:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0994", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "early_impact", "product" : { "product_data" : [ { "product_name" : "productcart", "version" : { "version_data" : [ { "version_value" : "2.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://digitalparadox.org/advisories/prodcart.txt", "name" : "http://digitalparadox.org/advisories/prodcart.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14833", "name" : "14833", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/15263", "name" : "15263", "refsource" : "OSVDB", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15265", "name" : "15265", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/12990", "name" : "12990", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0995", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "early_impact", "product" : { "product_data" : [ { "product_name" : "productcart", "version" : { "version_data" : [ { "version_value" : "2.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://digitalparadox.org/advisories/prodcart.txt", "name" : "http://digitalparadox.org/advisories/prodcart.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/14833", "name" : "14833", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/15264", "name" : "15264", "refsource" : "OSVDB", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15266", "name" : "15266", "refsource" : "OSVDB", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/15267", "name" : "15267", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/15268", "name" : "15268", "refsource" : "OSVDB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/12990", "name" : "12990", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2008-09-05T20:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2005-0996", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francisco_burzi", "product" : { "product_data" : [ { "product_name" : "php-nuke", "version" : { "version_data" : [ { "version_value" : "7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=111289685724764&w=2", "name" : "20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2005-05-02T04:00Z", "lastModifiedDate" : "2016-10-